fffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x514, &(0x7f0000000100)=[{}]}, 0x10)

20:28:15 executing program 4:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$PIO_FONTRESET(r0, 0x40046104, 0xa07000)

20:28:15 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @dev}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

20:28:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r2}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x1, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {0x4000}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0)

20:28:15 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xfffffffffffffff9}, 0x2)

20:28:15 executing program 7:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="0218000010000000000000000000000008001200000000000000000000000000fb000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002002000ac14ffa5000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

20:28:15 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x1000, 0x800, 0x8001}, 0x18)

20:28:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'rose0\x00', @dev, [], @link_local, [], 0xe0, 0xe0, 0x118, [@m802_3={'802_3\x00', 0x8}, @time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x220)

20:28:15 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x1000, 0x800, 0x8001}, 0x18)

20:28:15 executing program 4:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @dev}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

20:28:15 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r1, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r2}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x1, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {0x4000}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0)

20:28:15 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b99d0100000f320f01cfb8006000000f23c00f21f835010003000f23f866baf80cb8e0371683ef66bafc0cb88000c0feefb800166f1c0f23d80f21f835c00000f00f23f866ba210066ed66b801018ec00fc7afbf000000b9c9080000b89c000000ba000000000f30660f38825100", 0x6e}], 0x1, 0x0, &(0x7f0000000080), 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:15 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xfffffffffffffff9}, 0x2)

20:28:15 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @dev}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

20:28:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'rose0\x00', @dev, [], @link_local, [], 0xe0, 0xe0, 0x118, [@m802_3={'802_3\x00', 0x8}, @time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x220)

20:28:15 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x1000, 0x800, 0x8001}, 0x18)

[  256.857844] kvm [18003]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0x187 data 0xb8
[  256.905051] kvm [18003]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0x186 data 0xb8
[  256.928111] kvm [18003]: vcpu0, guest rIP: 0x9166 ignored wrmsr: 0x11e data 0xb8
[  256.951063] kvm [18003]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0xc2 data 0xb8
[  256.960030] kvm [18003]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0xc1 data 0xb8
20:28:16 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x514, &(0x7f0000000100)=[{}]}, 0x10)

20:28:16 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

20:28:16 executing program 4:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @dev}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

20:28:16 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xfffffffffffffff9}, 0x2)

20:28:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000480))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3ff, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)

20:28:16 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @dev}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

20:28:16 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3e, &(0x7f00000001c0)=""/78, &(0x7f0000000280)=0x4e)

20:28:16 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b99d0100000f320f01cfb8006000000f23c00f21f835010003000f23f866baf80cb8e0371683ef66bafc0cb88000c0feefb800166f1c0f23d80f21f835c00000f00f23f866ba210066ed66b801018ec00fc7afbf000000b9c9080000b89c000000ba000000000f30660f38825100", 0x6e}], 0x1, 0x0, &(0x7f0000000080), 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:16 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3e, &(0x7f00000001c0)=""/78, &(0x7f0000000280)=0x4e)

20:28:16 executing program 4:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @dev}, 0xc)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)

20:28:16 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946f61830020200a0009f00000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:28:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:16 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

20:28:16 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3e, &(0x7f00000001c0)=""/78, &(0x7f0000000280)=0x4e)

[  257.455812] kvm [18034]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0x187 data 0xb8
[  257.468782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
[  257.482996] device lo entered promiscuous mode
20:28:16 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3e, &(0x7f00000001c0)=""/78, &(0x7f0000000280)=0x4e)

[  257.512135] kvm [18034]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0x186 data 0xb8
[  257.546793] kvm [18034]: vcpu0, guest rIP: 0x9166 ignored wrmsr: 0x11e data 0xb8
20:28:16 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  257.570231] kvm [18034]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0xc2 data 0xb8
[  257.592863] kvm [18034]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0xc1 data 0xb8
20:28:17 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x514, &(0x7f0000000100)=[{}]}, 0x10)

20:28:17 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000000080), 0x0)

20:28:17 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b99d0100000f320f01cfb8006000000f23c00f21f835010003000f23f866baf80cb8e0371683ef66bafc0cb88000c0feefb800166f1c0f23d80f21f835c00000f00f23f866ba210066ed66b801018ec00fc7afbf000000b9c9080000b89c000000ba000000000f30660f38825100", 0x6e}], 0x1, 0x0, &(0x7f0000000080), 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:17 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  258.258710] kvm [18081]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0x187 data 0xb8
[  258.281014] kvm [18081]: vcpu0, guest rIP: 0x9166 disabled perfctr wrmsr: 0x186 data 0xb8
[  258.315562] kvm [18081]: vcpu0, guest rIP: 0x9166 ignored wrmsr: 0x11e data 0xb8
20:28:17 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000480))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3ff, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)

20:28:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946f61830020200a0009f00000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:28:17 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000380)="045b898f73", 0x1004, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
mount(&(0x7f00000008c0)='.', &(0x7f00000002c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000003c0))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

20:28:17 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:17 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000000080), 0x0)

20:28:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:17 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b99d0100000f320f01cfb8006000000f23c00f21f835010003000f23f866baf80cb8e0371683ef66bafc0cb88000c0feefb800166f1c0f23d80f21f835c00000f00f23f866ba210066ed66b801018ec00fc7afbf000000b9c9080000b89c000000ba000000000f30660f38825100", 0x6e}], 0x1, 0x0, &(0x7f0000000080), 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:17 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000000080), 0x0)

20:28:17 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000380)="045b898f73", 0x1004, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
mount(&(0x7f00000008c0)='.', &(0x7f00000002c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000003c0))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

20:28:17 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet6_buf(r1, 0x29, 0x33, &(0x7f0000000080), 0x0)

20:28:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0))
r2 = socket$unix(0x1, 0x1, 0x0)
io_submit(r1, 0x3bd, &(0x7f00000026c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)}])

20:28:17 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000380)="045b898f73", 0x1004, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
mount(&(0x7f00000008c0)='.', &(0x7f00000002c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000003c0))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

[  258.603346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
[  258.626366] kvm [18100]: vcpu0, guest rIP: 0x9166 ignored wrmsr: 0x11e data 0xb8
[  258.634708] device lo entered promiscuous mode
20:28:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946f61830020200a0009f00000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:28:17 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000380)="045b898f73", 0x1004, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
mount(&(0x7f00000008c0)='.', &(0x7f00000002c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000003c0))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

20:28:17 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_sctp(0x2, 0x280000080001, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)

[  259.232744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
20:28:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000480))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3ff, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)

20:28:18 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:18 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0))
r2 = socket$unix(0x1, 0x1, 0x0)
io_submit(r1, 0x3bd, &(0x7f00000026c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)}])

20:28:18 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18)

20:28:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1)

20:28:18 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946f61830020200a0009f00000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:28:18 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1)

20:28:18 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18)

20:28:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1)

20:28:18 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18)

20:28:18 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1)

20:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000000100)=""/119, &(0x7f0000000280)=0x77)

20:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000000100)=""/119, &(0x7f0000000280)=0x77)

20:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000000100)=""/119, &(0x7f0000000280)=0x77)

[  259.644846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
20:28:18 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_sctp(0x2, 0x280000080001, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)

20:28:19 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000480))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3ff, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)

20:28:19 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18)

20:28:19 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)="6c6f00966fd651b959a9c84a2c00d2970403dc0d")
r2 = socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)="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")

20:28:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0))
r2 = socket$unix(0x1, 0x1, 0x0)
io_submit(r1, 0x3bd, &(0x7f00000026c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)}])

20:28:19 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x8, &(0x7f0000000100)=""/119, &(0x7f0000000280)=0x77)

20:28:19 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100))
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0))

20:28:19 executing program 6:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1, 0x1b071, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000007000/0x3000)=nil)

20:28:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_setup(0x10000, &(0x7f0000000100)=<r2=>0x0)
r3 = eventfd2(0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000004440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1, r3}])

20:28:19 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

20:28:19 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100))
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0))

20:28:19 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0))
r2 = socket$unix(0x1, 0x1, 0x0)
io_submit(r1, 0x3bd, &(0x7f00000026c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)}])

20:28:19 executing program 6:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1, 0x1b071, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000007000/0x3000)=nil)

20:28:19 executing program 6:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1, 0x1b071, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000007000/0x3000)=nil)

20:28:19 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100))
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0))

20:28:19 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100))
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0))

20:28:19 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_sctp(0x2, 0x280000080001, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)

20:28:19 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000003b40)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)

20:28:19 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

20:28:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)})

20:28:19 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070")
unshare(0x2000400)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xffffffffffffff81)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f00000000c0)=0xb0)

20:28:19 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x800000000002, 0x0)
recvmsg(r1, &(0x7f0000002680)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000001380)=""/125, 0x7d}, {&(0x7f0000000200)}, {&(0x7f0000003440)=""/4096, 0x37c}], 0x3, &(0x7f00000014c0)=""/251, 0xfb}, 0x0)
bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0)

20:28:19 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r3, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

20:28:19 executing program 6:
perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1, 0x1b071, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000007000/0x3000)=nil)

20:28:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000003b40)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)

20:28:20 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

[  261.190820] binder: 18259:18261 ERROR: BC_REGISTER_LOOPER called without request
[  261.229810] binder: BINDER_SET_CONTEXT_MGR already set
20:28:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:28:20 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070")
unshare(0x2000400)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xffffffffffffff81)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f00000000c0)=0xb0)

20:28:20 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x6c, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

[  261.265164] binder: 18259:18261 ERROR: BC_REGISTER_LOOPER called without request
[  261.276022] binder: 18259:18269 ioctl 40046207 0 returned -16
[  261.294793] binder_alloc: 18259: binder_alloc_buf, no vma
[  261.300563] binder: 18259:18273 transaction failed 29189/-3, size 0-0 line 2967
20:28:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000003b40)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)

20:28:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)})

20:28:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

[  261.323438] binder: undelivered TRANSACTION_ERROR: 29189
[  261.348754] binder: send failed reply for transaction 122 to 18259:18261
[  261.390041] binder: undelivered TRANSACTION_COMPLETE
[  261.395216] binder: undelivered TRANSACTION_ERROR: 29189
[  261.441796] binder: 18297:18299 ERROR: BC_REGISTER_LOOPER called without request
[  261.462316] binder: release 18297:18299 transaction 125 out, still active
[  261.469354] binder: undelivered TRANSACTION_COMPLETE
[  261.506988] binder: send failed reply for transaction 125, target dead
20:28:20 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_sctp(0x2, 0x280000080001, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r1, 0x1)

20:28:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:28:20 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070")
unshare(0x2000400)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xffffffffffffff81)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f00000000c0)=0xb0)

20:28:20 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r3, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

20:28:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000003b40)=[@in={0x2, 0x0, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)

20:28:20 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

20:28:20 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

20:28:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

20:28:20 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r3, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

20:28:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)})

20:28:20 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x103d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:28:20 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x800000000002, 0x0)
recvmsg(r1, &(0x7f0000002680)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000001380)=""/125, 0x7d}, {&(0x7f0000000200)}, {&(0x7f0000003440)=""/4096, 0x37c}], 0x3, &(0x7f00000014c0)=""/251, 0xfb}, 0x0)
bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0)

20:28:20 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070")
unshare(0x2000400)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xffffffffffffff81)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback}}}}, &(0x7f00000000c0)=0xb0)

20:28:20 executing program 6:
getpid()
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000040)=0x268)

20:28:20 executing program 2:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r3, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

20:28:20 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

[  262.137426] binder: 18332:18337 ERROR: BC_REGISTER_LOOPER called without request
[  262.154209] binder: release 18332:18337 transaction 127 out, still active
[  262.161229] binder: undelivered TRANSACTION_COMPLETE
[  262.238044] binder: send failed reply for transaction 127, target dead
20:28:21 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0x4040ae9e)

20:28:21 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

20:28:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)})

20:28:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000001ec0)=@hci, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/159, 0x9f}}], 0x1, 0x0, &(0x7f0000002640)={0x0, 0x1c9c380})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
clone(0x0, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff))
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1)
getpriority(0x1, 0x0)

20:28:21 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00')
getdents64(r1, &(0x7f0000000340)=""/57, 0x39)
sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[{0x18, 0x0, 0x7, "8908"}], 0x18}}], 0x2, 0x0)

20:28:21 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

20:28:21 executing program 7:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={<r1=>0x7ff, @in6}, &(0x7f0000000040)=0xa0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0xc)

[  262.518164] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  262.540816] binder: 18365:18366 ERROR: BC_REGISTER_LOOPER called without request
[  262.558333] binder: release 18365:18366 transaction 129 out, still active
[  262.565486] binder: undelivered TRANSACTION_COMPLETE
[  262.605097] binder: send failed reply for transaction 129, target dead
20:28:21 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x800000000002, 0x0)
recvmsg(r1, &(0x7f0000002680)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000001380)=""/125, 0x7d}, {&(0x7f0000000200)}, {&(0x7f0000003440)=""/4096, 0x37c}], 0x3, &(0x7f00000014c0)=""/251, 0xfb}, 0x0)
bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0)

20:28:21 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, r1/1000+10000}}, &(0x7f00000000c0))
getitimer(0x2, &(0x7f0000000100))

20:28:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
read(r2, &(0x7f0000000280)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0xe)
ioctl$TCSETSF(r2, 0x80047437, &(0x7f0000000000))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

20:28:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:21 executing program 7:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={<r1=>0x7ff, @in6}, &(0x7f0000000040)=0xa0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0xc)

20:28:21 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0x4040ae9e)

20:28:21 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00')
getdents64(r1, &(0x7f0000000340)=""/57, 0x39)
sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[{0x18, 0x0, 0x7, "8908"}], 0x18}}], 0x2, 0x0)

20:28:21 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00')
getdents64(r1, &(0x7f0000000340)=""/57, 0x39)
sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[{0x18, 0x0, 0x7, "8908"}], 0x18}}], 0x2, 0x0)

20:28:21 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
arch_prctl(0x2002, &(0x7f0000000180))
syslog(0x2, &(0x7f00000000c0)=""/4096, 0x1000)

20:28:21 executing program 7:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={<r1=>0x7ff, @in6}, &(0x7f0000000040)=0xa0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0xc)

20:28:21 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0x4040ae9e)

20:28:21 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00')
getdents64(r1, &(0x7f0000000340)=""/57, 0x39)
sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[{0x18, 0x0, 0x7, "8908"}], 0x18}}], 0x2, 0x0)

20:28:22 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000001ec0)=@hci, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/159, 0x9f}}], 0x1, 0x0, &(0x7f0000002640)={0x0, 0x1c9c380})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
clone(0x0, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff))
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1)
getpriority(0x1, 0x0)

20:28:22 executing program 7:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={<r1=>0x7ff, @in6}, &(0x7f0000000040)=0xa0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0xc)

20:28:22 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0x4040ae9e)

20:28:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x800000000002, 0x0)
recvmsg(r1, &(0x7f0000002680)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000001380)=""/125, 0x7d}, {&(0x7f0000000200)}, {&(0x7f0000003440)=""/4096, 0x37c}], 0x3, &(0x7f00000014c0)=""/251, 0xfb}, 0x0)
bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)
sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0)

20:28:22 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
read(r2, &(0x7f0000000280)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0xe)
ioctl$TCSETSF(r2, 0x80047437, &(0x7f0000000000))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

20:28:22 executing program 6:
r0 = getpgid(0x0)
sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
close(r2)
r3 = memfd_create(&(0x7f0000000300)='-/\'[\x00', 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x6)
pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4})
write(r2, &(0x7f000014d000), 0xfffffd48)
close(r1)

20:28:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 4:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000000))

20:28:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:22 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYRES16], 0x3e1)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:28:23 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000001ec0)=@hci, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/159, 0x9f}}], 0x1, 0x0, &(0x7f0000002640)={0x0, 0x1c9c380})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
clone(0x0, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff))
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1)
getpriority(0x1, 0x0)

20:28:23 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xc868)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc)
write(r2, &(0x7f0000000180)="f5", 0x1)
write$binfmt_misc(r2, &(0x7f0000000080)={'syz1'}, 0x4)
write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1'}, 0x4)
close(r2)

20:28:23 executing program 4:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000000))

20:28:23 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040), 0x13f, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)

20:28:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:23 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040), 0x13f, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)

20:28:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
read(r2, &(0x7f0000000280)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0xe)
ioctl$TCSETSF(r2, 0x80047437, &(0x7f0000000000))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

20:28:23 executing program 4:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000000))

20:28:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:23 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xc868)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc)
write(r2, &(0x7f0000000180)="f5", 0x1)
write$binfmt_misc(r2, &(0x7f0000000080)={'syz1'}, 0x4)
write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1'}, 0x4)
close(r2)

20:28:23 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:23 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040), 0x13f, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)

20:28:23 executing program 6:
r0 = getpgid(0x0)
sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
close(r2)
r3 = memfd_create(&(0x7f0000000300)='-/\'[\x00', 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x6)
pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4})
write(r2, &(0x7f000014d000), 0xfffffd48)
close(r1)

20:28:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:23 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040), 0x13f, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)

20:28:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:24 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
recvmmsg(r0, &(0x7f0000002500)=[{{&(0x7f0000001ec0)=@hci, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/159, 0x9f}}], 0x1, 0x0, &(0x7f0000002640)={0x0, 0x1c9c380})
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
clone(0x0, &(0x7f0000b53000), &(0x7f0000000080), &(0x7f0000c35ffc), &(0x7f0000b3bfff))
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1)
getpriority(0x1, 0x0)

20:28:24 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:24 executing program 4:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCINQ(r0, 0x5411, &(0x7f0000000000))

20:28:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}})

20:28:24 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)=""/134}, 0x18)

20:28:24 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xc868)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc)
write(r2, &(0x7f0000000180)="f5", 0x1)
write$binfmt_misc(r2, &(0x7f0000000080)={'syz1'}, 0x4)
write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1'}, 0x4)
close(r2)

20:28:24 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
read(r2, &(0x7f0000000280)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0xe)
ioctl$TCSETSF(r2, 0x80047437, &(0x7f0000000000))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

20:28:24 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x0)
lookup_dcookie(0x0, &(0x7f0000000080)=""/132, 0x84)

20:28:24 executing program 4:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf)
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))

20:28:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e22000000006495138037fef504c058000b4824ca945f64009440050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a10", 0x58}], 0x1)

20:28:24 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)=""/134}, 0x18)

20:28:24 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xc868)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc)
write(r2, &(0x7f0000000180)="f5", 0x1)
write$binfmt_misc(r2, &(0x7f0000000080)={'syz1'}, 0x4)
write$binfmt_misc(r2, &(0x7f00000002c0)={'syz1'}, 0x4)
close(r2)

20:28:24 executing program 6:
r0 = getpgid(0x0)
sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
close(r2)
r3 = memfd_create(&(0x7f0000000300)='-/\'[\x00', 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x6)
pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4})
write(r2, &(0x7f000014d000), 0xfffffd48)
close(r1)

20:28:24 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)=""/134}, 0x18)

20:28:24 executing program 7:
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1)

[  265.956532] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'.
20:28:24 executing program 4:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf)
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))

20:28:25 executing program 4:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf)
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))

20:28:25 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x8)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

20:28:25 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x6, 0x209e20, 0x8000000001}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000040), &(0x7f0000000080)=""/134}, 0x18)

20:28:25 executing program 7:
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1)

20:28:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e22000000006495138037fef504c058000b4824ca945f64009440050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a10", 0x58}], 0x1)

20:28:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x400000085, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0), 0x0)

[  266.506825] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'.
[  266.516241] Invalid argument reading file caps for ./file0
[  266.532961] Invalid argument reading file caps for ./file0
20:28:25 executing program 6:
r0 = getpgid(0x0)
sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
close(r2)
r3 = memfd_create(&(0x7f0000000300)='-/\'[\x00', 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x6)
pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4})
write(r2, &(0x7f000014d000), 0xfffffd48)
close(r1)

20:28:25 executing program 4:
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf)
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))

20:28:25 executing program 7:
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1)

20:28:25 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x8)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

20:28:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e22000000006495138037fef504c058000b4824ca945f64009440050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a10", 0x58}], 0x1)

20:28:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x400000085, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0), 0x0)

20:28:25 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="e8fa5a37718b9100162cac284243922516070c5c2b3004a222e30b86c70733c8", 0x20)

20:28:25 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x800000800000001)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

20:28:25 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x800000800000001)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

20:28:25 executing program 7:
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1)

20:28:25 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r0, r1, &(0x7f00000000c0), 0x3412)

[  266.933391] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'.
[  266.952205] Invalid argument reading file caps for ./file0
20:28:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x400000085, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0), 0x0)

20:28:25 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="e8fa5a37718b9100162cac284243922516070c5c2b3004a222e30b86c70733c8", 0x20)

20:28:25 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x8)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

20:28:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e22000000006495138037fef504c058000b4824ca945f64009440050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a10", 0x58}], 0x1)

20:28:25 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x80)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

[  267.052101] Invalid argument reading file caps for ./file0
[  267.056922] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'.
20:28:26 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x80)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

20:28:26 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x800000800000001)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

20:28:26 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="e8fa5a37718b9100162cac284243922516070c5c2b3004a222e30b86c70733c8", 0x20)

20:28:26 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000080), 0x400000085, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f00000000c0), 0x0)

20:28:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:26 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x8)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300))

20:28:26 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000002c0))
symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00')
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')

20:28:26 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
sendmmsg(r0, &(0x7f000000a3c0)=[{{&(0x7f0000004a40)=@ipx={0x4, 0x0, 0x0, "4acef4534077"}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004fc0)='(', 0x1}], 0x1, &(0x7f0000006080)}}, {{&(0x7f0000006640)=@nfc, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)='\n', 0x1}], 0x1, &(0x7f0000006800)}}, {{&(0x7f0000007840)=@ax25={0x3, {"ac2c70e5343ae1"}}, 0x80, &(0x7f0000007980)=[{&(0x7f00000078c0)="f0", 0x1}], 0x1, &(0x7f00000079c0)}}, {{&(0x7f0000007f00)=@un=@abs, 0x80, &(0x7f000000a340)=[{&(0x7f000000a2c0)="bb", 0x1}], 0x1}}], 0x4, 0x4040800)

[  267.875211] Invalid argument reading file caps for ./file0
20:28:26 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x800000800000001)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

20:28:26 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x80)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

20:28:26 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="e8fa5a37718b9100162cac284243922516070c5c2b3004a222e30b86c70733c8", 0x20)

20:28:26 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000002c0))
symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00')
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')

20:28:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000140)="2e2f66696c65302f66696c652bb5", 0x0)

20:28:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x4000000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
getgroups(0x0, &(0x7f0000000040))
setns(r0, 0x0)

20:28:26 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
sendmmsg(r0, &(0x7f000000a3c0)=[{{&(0x7f0000004a40)=@ipx={0x4, 0x0, 0x0, "4acef4534077"}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004fc0)='(', 0x1}], 0x1, &(0x7f0000006080)}}, {{&(0x7f0000006640)=@nfc, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)='\n', 0x1}], 0x1, &(0x7f0000006800)}}, {{&(0x7f0000007840)=@ax25={0x3, {"ac2c70e5343ae1"}}, 0x80, &(0x7f0000007980)=[{&(0x7f00000078c0)="f0", 0x1}], 0x1, &(0x7f00000079c0)}}, {{&(0x7f0000007f00)=@un=@abs, 0x80, &(0x7f000000a340)=[{&(0x7f000000a2c0)="bb", 0x1}], 0x1}}], 0x4, 0x4040800)

20:28:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:26 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x80)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

20:28:26 executing program 2:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
write(r0, &(0x7f0000000240)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb53615e9dd96cf2f1133a34915386c68a8800660630ee74e67ae55318ad8f8420ff3eeeb7b51366d019bc6ca71ff04072a759d8c0", 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8)

20:28:26 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

20:28:26 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000002c0))
symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00')
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')

20:28:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x4000000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
getgroups(0x0, &(0x7f0000000040))
setns(r0, 0x0)

20:28:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000140)="2e2f66696c65302f66696c652bb5", 0x0)

20:28:26 executing program 7:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000))
mq_timedreceive(r0, &(0x7f0000000080)=""/30, 0x1e, 0x20000080, &(0x7f0000000100))

20:28:26 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
sendmmsg(r0, &(0x7f000000a3c0)=[{{&(0x7f0000004a40)=@ipx={0x4, 0x0, 0x0, "4acef4534077"}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004fc0)='(', 0x1}], 0x1, &(0x7f0000006080)}}, {{&(0x7f0000006640)=@nfc, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)='\n', 0x1}], 0x1, &(0x7f0000006800)}}, {{&(0x7f0000007840)=@ax25={0x3, {"ac2c70e5343ae1"}}, 0x80, &(0x7f0000007980)=[{&(0x7f00000078c0)="f0", 0x1}], 0x1, &(0x7f00000079c0)}}, {{&(0x7f0000007f00)=@un=@abs, 0x80, &(0x7f000000a340)=[{&(0x7f000000a2c0)="bb", 0x1}], 0x1}}], 0x4, 0x4040800)

20:28:26 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

20:28:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:26 executing program 2:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
write(r0, &(0x7f0000000240)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb53615e9dd96cf2f1133a34915386c68a8800660630ee74e67ae55318ad8f8420ff3eeeb7b51366d019bc6ca71ff04072a759d8c0", 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8)

20:28:26 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=@getlink={0x3c, 0x12, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

20:28:26 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

20:28:27 executing program 0:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000002c0))
symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00')
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')

20:28:27 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x4000000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
getgroups(0x0, &(0x7f0000000040))
setns(r0, 0x0)

20:28:27 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
sendmmsg(r0, &(0x7f000000a3c0)=[{{&(0x7f0000004a40)=@ipx={0x4, 0x0, 0x0, "4acef4534077"}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000004fc0)='(', 0x1}], 0x1, &(0x7f0000006080)}}, {{&(0x7f0000006640)=@nfc, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)='\n', 0x1}], 0x1, &(0x7f0000006800)}}, {{&(0x7f0000007840)=@ax25={0x3, {"ac2c70e5343ae1"}}, 0x80, &(0x7f0000007980)=[{&(0x7f00000078c0)="f0", 0x1}], 0x1, &(0x7f00000079c0)}}, {{&(0x7f0000007f00)=@un=@abs, 0x80, &(0x7f000000a340)=[{&(0x7f000000a2c0)="bb", 0x1}], 0x1}}], 0x4, 0x4040800)

20:28:27 executing program 7:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980))
rmdir(&(0x7f0000000040)='./file0/file0\x00')

20:28:27 executing program 2:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
write(r0, &(0x7f0000000240)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb53615e9dd96cf2f1133a34915386c68a8800660630ee74e67ae55318ad8f8420ff3eeeb7b51366d019bc6ca71ff04072a759d8c0", 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8)

20:28:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:27 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x851}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000140)="2e2f66696c65302f66696c652bb5", 0x0)

20:28:27 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

20:28:27 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x4000000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
getgroups(0x0, &(0x7f0000000040))
setns(r0, 0x0)

20:28:27 executing program 2:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
write(r0, &(0x7f0000000240)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb53615e9dd96cf2f1133a34915386c68a8800660630ee74e67ae55318ad8f8420ff3eeeb7b51366d019bc6ca71ff04072a759d8c0", 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8)

20:28:27 executing program 7:
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x229, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x8, 0xc, 0x0, 0x0, 0x0, [{[@dev]}]}]}}}}}}}, &(0x7f0000000000))

20:28:27 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4)
bind$inet(r1, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000fa0fff), 0xffffff8d, 0x20020052, &(0x7f0000e97fcf)={0x2, 0x1, @loopback}, 0x10)

20:28:27 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)
read$FUSE(r0, &(0x7f00000050c0), 0x1000)

20:28:27 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="757365722e29f4caf42a2c5db09d401bf31441917362464b8e93b54f95a572073294aad4ed88aa1e1d52c02b18f23c693cd3937a6c163ce872abf43de85f402eec5d618750e462302b40"], &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0)
flistxattr(r0, &(0x7f0000000640)=""/235, 0xeb)

20:28:27 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
mknod$loop(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff)
mkdir(&(0x7f0000000140)="2e2f66696c65302f66696c652bb5", 0x0)

20:28:27 executing program 7:
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x229, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x8, 0xc, 0x0, 0x0, 0x0, [{[@dev]}]}]}}}}}}}, &(0x7f0000000000))

20:28:27 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4)
bind$inet(r1, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000fa0fff), 0xffffff8d, 0x20020052, &(0x7f0000e97fcf)={0x2, 0x1, @loopback}, 0x10)

20:28:27 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x800001)
r1 = memfd_create(&(0x7f0000000980)="3a760ac4dcf828c0dd2d13f7626f786ee36f9ad3a39f3f61e1dcd0aa6333b6ce96fe6c263c766137c551de760ff538fcc79e0504003ed7fada717d9a48862d2128684ab099e538cbd4319c9dc8903fd93adcd61aeb4686814bc7a289253f9c9aa878b5dc577c9f052f4e7cc65504bfcf7348cc13bc90f5211cc2504ac2d32e4ae53ec60781abb92950b7fce94905a39e3946eee677420800ce34da0b2fa50847c2679fa51d5a7a3b9240b0954723db0b9538fa362af7047f22558b991bb876068ea011fd95c9e23f745e616d89703d977200000000000000003050c4d282455ff349a466b376cad96f94301703e77c5457b298", 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000440)="a8", 0x1}], 0x1, 0x81003)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
fallocate(r0, 0x11, 0x0, 0x40200)

20:28:27 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="757365722e29f4caf42a2c5db09d401bf31441917362464b8e93b54f95a572073294aad4ed88aa1e1d52c02b18f23c693cd3937a6c163ce872abf43de85f402eec5d618750e462302b40"], &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0)
flistxattr(r0, &(0x7f0000000640)=""/235, 0xeb)

20:28:27 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:27 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x851}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:27 executing program 7:
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x229, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x8, 0xc, 0x0, 0x0, 0x0, [{[@dev]}]}]}}}}}}}, &(0x7f0000000000))

20:28:27 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="757365722e29f4caf42a2c5db09d401bf31441917362464b8e93b54f95a572073294aad4ed88aa1e1d52c02b18f23c693cd3937a6c163ce872abf43de85f402eec5d618750e462302b40"], &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0)
flistxattr(r0, &(0x7f0000000640)=""/235, 0xeb)

20:28:27 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4)
bind$inet(r1, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000fa0fff), 0xffffff8d, 0x20020052, &(0x7f0000e97fcf)={0x2, 0x1, @loopback}, 0x10)

20:28:27 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0)

20:28:27 executing program 7:
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x229, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x8, 0xc, 0x0, 0x0, 0x0, [{[@dev]}]}]}}}}}}}, &(0x7f0000000000))

20:28:28 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)
read$FUSE(r0, &(0x7f00000050c0), 0x1000)

20:28:28 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:28 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="757365722e29f4caf42a2c5db09d401bf31441917362464b8e93b54f95a572073294aad4ed88aa1e1d52c02b18f23c693cd3937a6c163ce872abf43de85f402eec5d618750e462302b40"], &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0)
flistxattr(r0, &(0x7f0000000640)=""/235, 0xeb)

20:28:28 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:28 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4)
bind$inet(r1, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000fa0fff), 0xffffff8d, 0x20020052, &(0x7f0000e97fcf)={0x2, 0x1, @loopback}, 0x10)

20:28:28 executing program 7:
r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
capset(&(0x7f0000000ffc)={0x20080522}, &(0x7f0000000000))

20:28:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0)

20:28:28 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x851}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:28 executing program 4:
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000000), 0x8})
clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000002300))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_destroy(r0)

20:28:28 executing program 7:
r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
capset(&(0x7f0000000ffc)={0x20080522}, &(0x7f0000000000))

20:28:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0)

20:28:28 executing program 6:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000))
listen(r1, 0x0)

20:28:28 executing program 3:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:28 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:28:28 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x851}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0)

20:28:29 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)
read$FUSE(r0, &(0x7f00000050c0), 0x1000)

20:28:29 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='usrjquota='])

20:28:29 executing program 7:
r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
capset(&(0x7f0000000ffc)={0x20080522}, &(0x7f0000000000))

20:28:29 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d34008f762070")
sync()

20:28:29 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

20:28:29 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

20:28:29 executing program 4:
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000000), 0x8})
clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000002300))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_destroy(r0)

20:28:29 executing program 7:
r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
capset(&(0x7f0000000ffc)={0x20080522}, &(0x7f0000000000))

[  270.659960] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
20:28:29 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='usrjquota='])

20:28:29 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ip6gre0\x00', 0xffffffffffffff9c}, 0x10)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="886c70fe5200b498166059e2be615b5ff918caa906b5c64e49d104f9778bc7ea"})

20:28:29 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[])
r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
io_setup(0x4, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000440)='\v', 0x1}])

20:28:29 executing program 6:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000))
listen(r1, 0x0)

20:28:29 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000100)={@broadcast, @dev}, 0xc)

20:28:29 executing program 7:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

20:28:29 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ip6gre0\x00', 0xffffffffffffff9c}, 0x10)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="886c70fe5200b498166059e2be615b5ff918caa906b5c64e49d104f9778bc7ea"})

20:28:29 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000100)={@broadcast, @dev}, 0xc)

[  270.807740] FAT-fs (loop0): bogus number of reserved sectors
[  270.813683] FAT-fs (loop0): Can't find a valid FAT filesystem
[  270.823288] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  270.902082] FAT-fs (loop0): bogus number of reserved sectors
[  270.908017] FAT-fs (loop0): Can't find a valid FAT filesystem
20:28:30 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280))
write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90)
read$FUSE(r0, &(0x7f00000050c0), 0x1000)

20:28:30 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ip6gre0\x00', 0xffffffffffffff9c}, 0x10)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="886c70fe5200b498166059e2be615b5ff918caa906b5c64e49d104f9778bc7ea"})

20:28:30 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='usrjquota='])

20:28:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000100)={@broadcast, @dev}, 0xc)

20:28:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={[{@errors_remount='errors=remount-ro'}, {@resize='resize'}]})

20:28:30 executing program 4:
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000000), 0x8})
clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000002300))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_destroy(r0)

[  271.651471] JFS: Cannot determine volume size
20:28:30 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ip6gre0\x00', 0xffffffffffffff9c}, 0x10)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="886c70fe5200b498166059e2be615b5ff918caa906b5c64e49d104f9778bc7ea"})

20:28:30 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x2, &(0x7f0000000100)={@broadcast, @dev}, 0xc)

[  271.674046] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  271.677010] JFS: Cannot determine volume size
20:28:30 executing program 6:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000))
listen(r1, 0x0)

20:28:30 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)})

[  271.753266] dccp_close: ABORT with 80 bytes unread
20:28:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={[{@errors_remount='errors=remount-ro'}, {@resize='resize'}]})

20:28:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0xfee64b5def490aec, &(0x7f00000000c0), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r2)
dup2(r2, r1)

20:28:30 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='usrjquota='])

20:28:30 executing program 7:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

[  271.832110] binder: 19059:19060 got transaction with unaligned buffers size, 4095
[  271.843677] JFS: Cannot determine volume size
20:28:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={[{@errors_remount='errors=remount-ro'}, {@resize='resize'}]})

[  271.884799] binder: 19059:19060 transaction failed 29201/-22, size 0-0 line 3012
[  271.905269] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3
[  271.918062] JFS: Cannot determine volume size
[  271.926539] binder_alloc: binder_alloc_mmap_handler: 19059 20001000-20004000 already mapped failed -16
20:28:30 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={[{@errors_remount='errors=remount-ro'}, {@resize='resize'}]})

[  271.956123] binder: BINDER_SET_CONTEXT_MGR already set
[  271.974858] binder: 19059:19060 ioctl 40046207 0 returned -16
[  271.992643] binder_alloc: 19059: binder_alloc_buf, no vma
[  271.998435] binder: 19059:19082 transaction failed 29189/-3, size 0-0 line 2967
[  272.007767] binder_alloc: 19059: binder_alloc_buf, no vma
[  272.013427] binder: 19059:19060 transaction failed 29189/-3, size 0-0 line 2967
[  272.038705] binder: undelivered TRANSACTION_ERROR: 29201
[  272.044690] binder: undelivered TRANSACTION_ERROR: 29189
[  272.056314] JFS: Cannot determine volume size
[  272.062281] binder: undelivered TRANSACTION_ERROR: 29189
[  272.073199] binder: release 19059:19060 transaction 132 out, still active
[  272.080195] binder: undelivered TRANSACTION_COMPLETE
[  272.093375] binder: send failed reply for transaction 132, target dead
20:28:31 executing program 4:
io_setup(0x1, &(0x7f0000000040)=<r0=>0x0)
io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000000), 0x8})
clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000002300))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
io_destroy(r0)

20:28:31 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

20:28:31 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)})

20:28:31 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000))
execveat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000580)=[&(0x7f00000004c0)='max_read'], &(0x7f0000000640), 0x0)

20:28:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0xfee64b5def490aec, &(0x7f00000000c0), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r2)
dup2(r2, r1)

20:28:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a7f2a23a", 0x4)
accept$alg(r0, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000100), 0x4)

20:28:31 executing program 6:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x1)
r1 = accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000))
listen(r1, 0x0)

20:28:31 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet_mreqn(r1, 0x0, 0x22, &(0x7f00000002c0)={@remote, @loopback}, 0xc)

20:28:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a7f2a23a", 0x4)
accept$alg(r0, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000100), 0x4)

[  272.675999] binder: 19111:19112 got transaction with unaligned buffers size, 4095
[  272.701474] binder: 19111:19112 transaction failed 29201/-22, size 0-0 line 3012
[  272.746379] binder: undelivered TRANSACTION_ERROR: 29201
[  272.753210] binder: release 19111:19112 transaction 137 out, still active
[  272.760224] binder: undelivered TRANSACTION_COMPLETE
20:28:31 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)})

20:28:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a7f2a23a", 0x4)
accept$alg(r0, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000100), 0x4)

20:28:31 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet_mreqn(r1, 0x0, 0x22, &(0x7f00000002c0)={@remote, @loopback}, 0xc)

[  272.806801] binder: send failed reply for transaction 137, target dead
[  272.843536] binder: 19131:19132 got transaction with unaligned buffers size, 4095
20:28:31 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0xfee64b5def490aec, &(0x7f00000000c0), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r2)
dup2(r2, r1)

[  272.854616] dccp_close: ABORT with 80 bytes unread
[  272.875586] binder: 19131:19132 transaction failed 29201/-22, size 0-0 line 3012
[  272.890806] binder: undelivered TRANSACTION_ERROR: 29201
[  272.897986] binder: release 19131:19132 transaction 140 out, still active
20:28:31 executing program 7:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

20:28:31 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet_mreqn(r1, 0x0, 0x22, &(0x7f00000002c0)={@remote, @loopback}, 0xc)

20:28:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a7f2a23a", 0x4)
accept$alg(r0, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000100), 0x4)

[  272.905003] binder: undelivered TRANSACTION_COMPLETE
[  272.952182] binder: send failed reply for transaction 140, target dead
20:28:32 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

20:28:32 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)})

20:28:32 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet_mreqn(r1, 0x0, 0x22, &(0x7f00000002c0)={@remote, @loopback}, 0xc)

20:28:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)

20:28:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0xfee64b5def490aec, &(0x7f00000000c0), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r2)
dup2(r2, r1)

20:28:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6gretap0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  273.499833] dccp_close: ABORT with 80 bytes unread
[  273.533675] binder: 19157:19158 got transaction with unaligned buffers size, 4095
[  273.576918] binder: 19157:19158 transaction failed 29201/-22, size 0-0 line 3012
[  273.616153] binder: undelivered TRANSACTION_ERROR: 29201
20:28:32 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008002d00000008dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0)

20:28:32 executing program 0:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x30, &(0x7f0000000240))

20:28:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)

[  273.622188] binder: release 19157:19158 transaction 143 out, still active
[  273.629185] binder: undelivered TRANSACTION_COMPLETE
[  273.658364] binder: send failed reply for transaction 143, target dead
20:28:32 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
clock_gettime(0x0, &(0x7f0000006240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80)=""/7, 0x7}}, {{&(0x7f0000005dc0)=@sco, 0x80, &(0x7f0000005f40), 0x0, &(0x7f0000005f80)=""/156, 0x3a7}}], 0x40000000000017a, 0x0, &(0x7f0000000080)={0x0, r3+10000000})

20:28:32 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(r0, &(0x7f0000000080)=@rc, 0x80)

[  273.715285] IPv6: Can't replace route, no match found
20:28:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6gretap0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

20:28:32 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008002d00000008dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0)

20:28:32 executing program 7:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

20:28:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)

20:28:32 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(r0, &(0x7f0000000080)=@rc, 0x80)

[  273.909313] IPv6: Can't replace route, no match found
[  273.916743] dccp_close: ABORT with 80 bytes unread
[  273.985609] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue
[  274.016236] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue
20:28:33 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(r0, &(0x7f0000000080)=@rc, 0x80)

20:28:33 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x20)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[]}}, 0x0)
recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002940)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f00000029c0)=""/80, 0x50}], 0x1, &(0x7f0000002e00)=""/255, 0xff}}], 0x1, 0x0, &(0x7f0000005080))
r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002180)}}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001d80), 0x16919f8970aee673, 0x0)

20:28:33 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
clock_gettime(0x0, &(0x7f0000006240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80)=""/7, 0x7}}, {{&(0x7f0000005dc0)=@sco, 0x80, &(0x7f0000005f40), 0x0, &(0x7f0000005f80)=""/156, 0x3a7}}], 0x40000000000017a, 0x0, &(0x7f0000000080)={0x0, r3+10000000})

20:28:33 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008002d00000008dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0)

20:28:33 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6gretap0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

20:28:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)

20:28:33 executing program 0:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x30, &(0x7f0000000240))

[  274.397741] dccp_close: ABORT with 80 bytes unread
[  274.468012] IPv6: Can't replace route, no match found
20:28:33 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(r0, &(0x7f0000000080)=@rc, 0x80)

20:28:33 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x1})
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000007c0)=ANY=[])
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18}, 0x18)

20:28:33 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008002d00000008dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0)

20:28:33 executing program 0:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x30, &(0x7f0000000240))

[  274.492036] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue
20:28:33 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
clock_gettime(0x0, &(0x7f0000006240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80)=""/7, 0x7}}, {{&(0x7f0000005dc0)=@sco, 0x80, &(0x7f0000005f40), 0x0, &(0x7f0000005f80)=""/156, 0x3a7}}], 0x40000000000017a, 0x0, &(0x7f0000000080)={0x0, r3+10000000})

20:28:33 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6gretap0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6)

[  274.672021] FAT-fs (loop5): bogus number of reserved sectors
[  274.677959] FAT-fs (loop5): Can't find a valid FAT filesystem
[  274.724399] IPv6: Can't replace route, no match found
[  274.776469] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue
20:28:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x6, &(0x7f0000000200), 0x8)
close(r2)
close(r1)

20:28:33 executing program 1:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

20:28:33 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0)
clock_gettime(0x0, &(0x7f0000006240)={0x0, <r3=>0x0})
recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80)=""/7, 0x7}}, {{&(0x7f0000005dc0)=@sco, 0x80, &(0x7f0000005f40), 0x0, &(0x7f0000005f80)=""/156, 0x3a7}}], 0x40000000000017a, 0x0, &(0x7f0000000080)={0x0, r3+10000000})

20:28:33 executing program 2:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5162b57e)
r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000fb6000)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

[  274.865707] dccp_close: ABORT with 80 bytes unread
20:28:34 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000301010000000000ffffffff02000000100002000c0001000500020000000004"], 0x24}}, 0x0)

20:28:34 executing program 0:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x30, &(0x7f0000000240))

20:28:34 executing program 1:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

20:28:34 executing program 6:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

20:28:34 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="0483000000c000ddb8460900ffb25bc202938207d9033780", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x8000000000005, @mcast2}, 0x1c)

[  275.422011] dccp_close: ABORT with 80 bytes unread
20:28:34 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000301010000000000ffffffff02000000100002000c0001000500020000000004"], 0x24}}, 0x0)

[  275.465994] FAT-fs (loop5): bogus number of reserved sectors
[  275.471921] FAT-fs (loop5): Can't find a valid FAT filesystem
[  275.487145] validate_nla: 5 callbacks suppressed
[  275.487159] netlink: 'syz-executor7': attribute type 2 has an invalid length.
20:28:34 executing program 1:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

20:28:34 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x1})
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000007c0)=ANY=[])
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18}, 0x18)

20:28:34 executing program 6:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

[  275.529380] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue
20:28:34 executing program 0:
socket$inet(0x28, 0x0, 0xfffffffffffffffc)

20:28:34 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="0483000000c000ddb8460900ffb25bc202938207d9033780", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x8000000000005, @mcast2}, 0x1c)

20:28:34 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000301010000000000ffffffff02000000100002000c0001000500020000000004"], 0x24}}, 0x0)

[  275.706288] netlink: 'syz-executor7': attribute type 2 has an invalid length.
20:28:34 executing program 6:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

20:28:34 executing program 1:
syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0)
close(r0)

20:28:34 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="0483000000c000ddb8460900ffb25bc202938207d9033780", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x8000000000005, @mcast2}, 0x1c)

[  275.809405] FAT-fs (loop5): bogus number of reserved sectors
[  275.815345] FAT-fs (loop5): Can't find a valid FAT filesystem
[  275.873265] ALSA: seq fatal error: cannot create timer (-22)
20:28:34 executing program 2:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5162b57e)
r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000fb6000)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:34 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000301010000000000ffffffff02000000100002000c0001000500020000000004"], 0x24}}, 0x0)

20:28:34 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x6, &(0x7f0000000200), 0x8)
close(r2)
close(r1)

20:28:34 executing program 1:
r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {0x0, 0x9}, {}, @result}], 0x30)

20:28:34 executing program 0:
socket$inet(0x28, 0x0, 0xfffffffffffffffc)

[  275.920894] netlink: 'syz-executor7': attribute type 2 has an invalid length.
20:28:34 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x1)
recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/22, 0x16}, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)

20:28:34 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="0483000000c000ddb8460900ffb25bc202938207d9033780", 0x18, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x8000000000005, @mcast2}, 0x1c)

20:28:34 executing program 0:
socket$inet(0x28, 0x0, 0xfffffffffffffffc)

[  276.135009] netlink: 'syz-executor7': attribute type 2 has an invalid length.
[  276.212597] tls_set_device_offload_rx: netdev lo with no TLS offload
20:28:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x1})
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000007c0)=ANY=[])
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18}, 0x18)

20:28:35 executing program 1:
r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {0x0, 0x9}, {}, @result}], 0x30)

20:28:35 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:35 executing program 0:
socket$inet(0x28, 0x0, 0xfffffffffffffffc)

20:28:35 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000007fed)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)={0x10001})
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0)

20:28:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x10000000})

20:28:35 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:35 executing program 1:
r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {0x0, 0x9}, {}, @result}], 0x30)

[  276.785432] FAT-fs (loop5): bogus number of reserved sectors
[  276.791384] FAT-fs (loop5): Can't find a valid FAT filesystem
20:28:35 executing program 2:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5162b57e)
r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000fb6000)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x10000000})

20:28:35 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000007fed)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)={0x10001})
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0)

20:28:35 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:35 executing program 1:
r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {0x0, 0x9}, {}, @result}], 0x30)

20:28:35 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x1)
recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/22, 0x16}, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)

20:28:35 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x6, &(0x7f0000000200), 0x8)
close(r2)
close(r1)

[  277.036872] ALSA: seq fatal error: cannot create timer (-22)
[  277.042919] tls_set_device_offload_rx: netdev lo with no TLS offload
20:28:35 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000007fed)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)={0x10001})
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0)

[  277.244375] tls_set_device_offload_rx: netdev lo with no TLS offload
20:28:36 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00', 0x1})
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000007c0)=ANY=[])
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18}, 0x18)

20:28:36 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x10000000})

20:28:36 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:36 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:36 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000007fed)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)={0x10001})
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0)

20:28:36 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070")
r1 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x1, 0x1)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="fb648f993e", 0x5}], 0x1)

20:28:36 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:36 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x10000000})

[  277.745740] FAT-fs (loop5): bogus number of reserved sectors
[  277.751719] FAT-fs (loop5): Can't find a valid FAT filesystem
20:28:36 executing program 2:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5162b57e)
r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000fb6000)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:36 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0x18, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}}, 0x0)

20:28:36 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={[{@session={'session'}}]})

20:28:36 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

20:28:36 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="01", 0x1, r1)
keyctl$revoke(0x3, r2)
add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000800), &(0x7f00000001c0)="b3", 0x1, r1)

20:28:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x6, &(0x7f0000000200), 0x8)
close(r2)
close(r1)

20:28:36 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x1)
recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/22, 0x16}, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)

[  278.105339] ALSA: seq fatal error: cannot create timer (-22)
20:28:36 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  278.183897] tls_set_device_offload_rx: netdev lo with no TLS offload
[  278.223827] hfs: invalid session number or type of track
[  278.229482] hfs: can't find a HFS filesystem on dev loop0
[  278.245084] hfs: invalid session number or type of track
[  278.250677] hfs: can't find a HFS filesystem on dev loop0
20:28:37 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

20:28:37 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0x18, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}}, 0x0)

20:28:37 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={[{@session={'session'}}]})

20:28:37 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4)

20:28:37 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0x18, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}}, 0x0)

20:28:37 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={[{@session={'session'}}]})

[  278.619695] hfs: invalid session number or type of track
[  278.625256] hfs: can't find a HFS filesystem on dev loop0
20:28:37 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0x18, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}}, 0x0)

20:28:37 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={[{@session={'session'}}]})

[  278.793481] hfs: invalid session number or type of track
[  278.799010] hfs: can't find a HFS filesystem on dev loop0
[  278.943973] hfs: invalid session number or type of track
[  278.949516] hfs: can't find a HFS filesystem on dev loop0
20:28:37 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x1)
recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/22, 0x16}, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)

[  279.221018] ALSA: seq fatal error: cannot create timer (-22)
[  279.269648] tls_set_device_offload_rx: netdev lo with no TLS offload
20:28:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0xa78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001780], 0x0, &(0x7f0000000080), &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller1\x00', "626f6e645f736c6186079f13a50187c8", 'tunl0\x00', 'veth1\x00', @broadcast, [], @local, [], 0x970, 0x9b8, 0x9e8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x1}}}, @among={'among\x00', 0x898, {{0x100, 0x0, 0x0, {[], 0x3, [{}, {[], @multicast2}, {[], @remote}]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3], 0x7, [{[], @local}, {[], @loopback}, {[], @local}, {[], @remote}, {}, {[], @multicast1}, {[], @broadcast}]}}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0xaf0)

20:28:44 executing program 5:
r0 = socket$packet(0x11, 0x8000000000000003, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c)

20:28:44 executing program 7:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000200), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000480)=@xdp, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000880)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000680)={0x0, 0x989680})
ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080))

20:28:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x8922, &(0x7f0000000180))

20:28:44 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18)
r2 = accept$alg(r1, 0x0, 0x0)
io_setup(0x100000001, &(0x7f0000000040)=<r3=>0x0)
sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)="00a65418709f8000013749aeb96daa3d", 0x10}])

20:28:44 executing program 0:
r0 = socket(0x40000000015, 0x805, 0x0)
bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)

20:28:44 executing program 2:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20)
ftruncate(r2, 0x80003)
sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe)

20:28:44 executing program 6:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast2}}, 0x1e)

20:28:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0xa78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001780], 0x0, &(0x7f0000000080), &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller1\x00', "626f6e645f736c6186079f13a50187c8", 'tunl0\x00', 'veth1\x00', @broadcast, [], @local, [], 0x970, 0x9b8, 0x9e8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x1}}}, @among={'among\x00', 0x898, {{0x100, 0x0, 0x0, {[], 0x3, [{}, {[], @multicast2}, {[], @remote}]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3], 0x7, [{[], @local}, {[], @loopback}, {[], @local}, {[], @remote}, {}, {[], @multicast1}, {[], @broadcast}]}}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0xaf0)

20:28:44 executing program 6:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast2}}, 0x1e)

20:28:44 executing program 5:
r0 = socket$packet(0x11, 0x8000000000000003, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c)

20:28:44 executing program 7:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000200), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000480)=@xdp, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000880)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000680)={0x0, 0x989680})
ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080))

20:28:44 executing program 0:
r0 = socket(0x40000000015, 0x805, 0x0)
bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)

20:28:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x8922, &(0x7f0000000180))

20:28:44 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18)
r2 = accept$alg(r1, 0x0, 0x0)
io_setup(0x100000001, &(0x7f0000000040)=<r3=>0x0)
sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)="00a65418709f8000013749aeb96daa3d", 0x10}])

[  286.312235] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16)
[  286.320382] FAT-fs (loop2): Filesystem has been set read-only
[  286.330578] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.339962] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.347838] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.362400] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.372700] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.381211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.389327] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.397078] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.404473] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
20:28:45 executing program 2:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20)
ftruncate(r2, 0x80003)
sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe)

20:28:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0xa78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001780], 0x0, &(0x7f0000000080), &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller1\x00', "626f6e645f736c6186079f13a50187c8", 'tunl0\x00', 'veth1\x00', @broadcast, [], @local, [], 0x970, 0x9b8, 0x9e8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x1}}}, @among={'among\x00', 0x898, {{0x100, 0x0, 0x0, {[], 0x3, [{}, {[], @multicast2}, {[], @remote}]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3], 0x7, [{[], @local}, {[], @loopback}, {[], @local}, {[], @remote}, {}, {[], @multicast1}, {[], @broadcast}]}}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0xaf0)

[  286.411784] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
20:28:45 executing program 6:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast2}}, 0x1e)

20:28:45 executing program 7:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000200), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000480)=@xdp, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000880)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000680)={0x0, 0x989680})
ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080))

20:28:45 executing program 5:
r0 = socket$packet(0x11, 0x8000000000000003, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c)

20:28:45 executing program 0:
r0 = socket(0x40000000015, 0x805, 0x0)
bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)

20:28:45 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18)
r2 = accept$alg(r1, 0x0, 0x0)
io_setup(0x100000001, &(0x7f0000000040)=<r3=>0x0)
sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)="00a65418709f8000013749aeb96daa3d", 0x10}])

20:28:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x8922, &(0x7f0000000180))

20:28:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0xa78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001780], 0x0, &(0x7f0000000080), &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller1\x00', "626f6e645f736c6186079f13a50187c8", 'tunl0\x00', 'veth1\x00', @broadcast, [], @local, [], 0x970, 0x9b8, 0x9e8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x1}}}, @among={'among\x00', 0x898, {{0x100, 0x0, 0x0, {[], 0x3, [{}, {[], @multicast2}, {[], @remote}]}, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3], 0x7, [{[], @local}, {[], @loopback}, {[], @local}, {[], @remote}, {}, {[], @multicast1}, {[], @broadcast}]}}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0xaf0)

[  286.715610] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16)
[  286.723750] FAT-fs (loop2): Filesystem has been set read-only
[  286.730225] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.742968] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  286.750589] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
20:28:45 executing program 2:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20)
ftruncate(r2, 0x80003)
sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe)

20:28:45 executing program 6:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast2}}, 0x1e)

20:28:45 executing program 7:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000200), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000480)=@xdp, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000880)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000680)={0x0, 0x989680})
ioctl$sock_bt(r0, 0x8906, &(0x7f0000000080))

20:28:45 executing program 0:
r0 = socket(0x40000000015, 0x805, 0x0)
bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x4000000, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10)

20:28:45 executing program 5:
r0 = socket$packet(0x11, 0x8000000000000003, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c)

20:28:45 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18)
r2 = accept$alg(r1, 0x0, 0x0)
io_setup(0x100000001, &(0x7f0000000040)=<r3=>0x0)
sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)="00a65418709f8000013749aeb96daa3d", 0x10}])

20:28:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x8922, &(0x7f0000000180))

20:28:45 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = msgget(0xffffffffffffffff, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/99}, 0x6b, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540))
msgctl$IPC_RMID(r0, 0x0)

20:28:45 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2284, &(0x7f0000001480)={0x3, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

20:28:45 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

20:28:45 executing program 0:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000011c0)={@multicast1, @loopback, @local}, 0xc)

20:28:45 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

[  287.075431] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16)
[  287.083601] FAT-fs (loop2): Filesystem has been set read-only
[  287.092049] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  287.102517] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  287.110693] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
20:28:45 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000040), 0xaa)
syz_emit_ethernet(0x66, &(0x7f0000000280)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x3], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f00000016c0))

20:28:45 executing program 4:
unshare(0x8020000)
semget$private(0x0, 0x6, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
semop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1800}, {0x0, 0x7fffffff}], 0x2)
setns(r0, 0x0)

20:28:45 executing program 2:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
fchdir(r0)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20)
ftruncate(r2, 0x80003)
sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe)

20:28:45 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2284, &(0x7f0000001480)={0x3, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

20:28:45 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

20:28:45 executing program 0:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000011c0)={@multicast1, @loopback, @local}, 0xc)

20:28:45 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

20:28:46 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2284, &(0x7f0000001480)={0x3, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

20:28:46 executing program 4:
unshare(0x8020000)
semget$private(0x0, 0x6, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
semop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1800}, {0x0, 0x7fffffff}], 0x2)
setns(r0, 0x0)

20:28:46 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

[  287.521132] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 16)
[  287.529128] FAT-fs (loop2): Filesystem has been set read-only
[  287.555503] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
20:28:46 executing program 0:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000011c0)={@multicast1, @loopback, @local}, 0xc)

[  287.571005] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
[  287.584083] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000020)
20:28:46 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = msgget(0xffffffffffffffff, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/99}, 0x6b, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540))
msgctl$IPC_RMID(r0, 0x0)

20:28:46 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1, 0x0)
io_setup(0x5b3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}])

20:28:46 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2284, &(0x7f0000001480)={0x3, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000080), &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)})

20:28:46 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

20:28:46 executing program 4:
unshare(0x8020000)
semget$private(0x0, 0x6, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
semop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1800}, {0x0, 0x7fffffff}], 0x2)
setns(r0, 0x0)

20:28:46 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

20:28:46 executing program 0:
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000011c0)={@multicast1, @loopback, @local}, 0xc)

20:28:46 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

20:28:46 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1, 0x0)
io_setup(0x5b3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}])

20:28:46 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

20:28:46 executing program 6:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

20:28:46 executing program 4:
unshare(0x8020000)
semget$private(0x0, 0x6, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
semop(0x0, &(0x7f0000000100)=[{0x0, 0x9, 0x1800}, {0x0, 0x7fffffff}], 0x2)
setns(r0, 0x0)

20:28:46 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000))

20:28:46 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4)

20:28:46 executing program 7:
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4)

20:28:46 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1, 0x0)
io_setup(0x5b3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}])

[  288.287788] rpcbind: RPC call returned error 22
[  288.299398] rpcbind: RPC call returned error 22
20:28:47 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = msgget(0xffffffffffffffff, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/99}, 0x6b, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540))
msgctl$IPC_RMID(r0, 0x0)

20:28:47 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

20:28:47 executing program 6:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

20:28:47 executing program 7:
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4)

20:28:47 executing program 4:
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0)

20:28:47 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000))

20:28:47 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000))
getpid()
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:47 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1, 0x0)
io_setup(0x5b3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}])

20:28:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000002)

20:28:47 executing program 6:
r0 = epoll_create1(0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

20:28:47 executing program 7:
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4)

20:28:47 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000))

[  288.964365] rpcbind: RPC call returned error 22
20:28:47 executing program 4:
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0)

20:28:47 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}}, 0x0)

20:28:47 executing program 6:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000812, r2, 0x2000000)

20:28:47 executing program 7:
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4)

[  289.233943] rpcbind: RPC call returned error 22
[  289.379535] x86/PAT: syz-executor6:19830 map pfn RAM range req write-combining for [mem 0x186400000-0x186402fff], got write-back
[  289.401066] x86/PAT: syz-executor6:19832 map pfn RAM range req write-combining for [mem 0x186400000-0x186402fff], got write-back
20:28:48 executing program 4:
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0)

20:28:48 executing program 6:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000812, r2, 0x2000000)

20:28:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

20:28:48 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}}, 0x0)

20:28:48 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
sendfile(r0, r0, &(0x7f0000000000), 0xffff)

20:28:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = msgget(0xffffffffffffffff, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/99}, 0x6b, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540))
msgctl$IPC_RMID(r0, 0x0)

[  289.968695] x86/PAT: syz-executor6:19856 map pfn RAM range req write-combining for [mem 0x175400000-0x175402fff], got write-back
20:28:48 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000))
getpid()
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:48 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000))

20:28:48 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}}, 0x0)

20:28:48 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
sendfile(r0, r0, &(0x7f0000000000), 0xffff)

20:28:48 executing program 6:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000812, r2, 0x2000000)

20:28:48 executing program 4:
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0)

20:28:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

[  290.119061] rpcbind: RPC call returned error 22
20:28:48 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000000)=0x4)

20:28:48 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}}, 0x0)

[  290.174562] x86/PAT: syz-executor6:19874 map pfn RAM range req write-combining for [mem 0x186400000-0x186402fff], got write-back
20:28:48 executing program 6:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000812, r2, 0x2000000)

20:28:48 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
sendfile(r0, r0, &(0x7f0000000000), 0xffff)

[  290.411638] x86/PAT: syz-executor6:19898 map pfn RAM range req write-combining for [mem 0x175400000-0x175402fff], got write-back
20:28:49 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x70, &(0x7f0000000100), &(0x7f0000000140)=0x20)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:28:49 executing program 4:
syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)='selinuxwlan0vboxnet0nodev\x00')
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000580)="1b", 0x1, 0x7fffffff}], 0x0, &(0x7f0000000380))

20:28:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

20:28:49 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000000)=0x4)

20:28:49 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="023a", &(0x7f0000000100)=""/198}, 0x18)

[  290.986436] gfs2: not a GFS2 filesystem
20:28:49 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000))
getpid()
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:49 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
sendfile(r0, r0, &(0x7f0000000000), 0xffff)

20:28:49 executing program 1:
r0 = userfaultfd(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

20:28:49 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000000)=0x4)

20:28:49 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="023a", &(0x7f0000000100)=""/198}, 0x18)

20:28:49 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x80001c, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

20:28:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = semget$private(0x0, 0x5, 0x0)
semtimedop(r1, &(0x7f00000012c0)=[{}, {0x4, 0x8, 0x1800}], 0x1f4, &(0x7f0000001340))

20:28:49 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="023a", &(0x7f0000000100)=""/198}, 0x18)

20:28:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = semget$private(0x0, 0x5, 0x0)
semtimedop(r1, &(0x7f00000012c0)=[{}, {0x4, 0x8, 0x1800}], 0x1f4, &(0x7f0000001340))

20:28:49 executing program 1:
r0 = userfaultfd(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

20:28:49 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000000)=0x4)

20:28:50 executing program 1:
r0 = userfaultfd(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

20:28:50 executing program 7:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x8004587d, 0x500006)

20:28:50 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001340), 0x4)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

20:28:50 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="023a", &(0x7f0000000100)=""/198}, 0x18)

20:28:50 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x70, &(0x7f0000000100), &(0x7f0000000140)=0x20)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:28:50 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:28:50 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000))
getpid()
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)

20:28:50 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

20:28:50 executing program 1:
r0 = userfaultfd(0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

20:28:50 executing program 7:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x8004587d, 0x500006)

20:28:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = semget$private(0x0, 0x5, 0x0)
semtimedop(r1, &(0x7f00000012c0)=[{}, {0x4, 0x8, 0x1800}], 0x1f4, &(0x7f0000001340))

20:28:50 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000000700000008ffffffad03010000000000950000000000000071260000000000003506000002000000bf25000000000000070500000e0000000f65000000000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf08000000000000070500000e0000000f6500000000000007050000040000001f65000000000000bf5400000000000007040000040000002d3201000000000095000000000000004d54010000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:28:50 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@loopback}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local}, @mark={0xc}]}, 0x110}}, 0x0)

20:28:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = semget$private(0x0, 0x5, 0x0)
semtimedop(r1, &(0x7f00000012c0)=[{}, {0x4, 0x8, 0x1800}], 0x1f4, &(0x7f0000001340))

20:28:50 executing program 7:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x8004587d, 0x500006)

20:28:50 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

20:28:50 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:28:50 executing program 7:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x8004587d, 0x500006)

[  292.410305] mip6: mip6_rthdr_init_state: state's mode is not 2: 0
20:28:51 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001340), 0x4)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

20:28:51 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@loopback}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local}, @mark={0xc}]}, 0x110}}, 0x0)

20:28:51 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

20:28:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="eb3c90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]})

[  292.821488] mip6: mip6_rthdr_init_state: state's mode is not 2: 0
[  292.830656] FAT-fs (loop4): bogus number of reserved sectors
[  292.836706] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (116 sectors)
[  292.846924] FAT-fs (loop4): Can't find a valid FAT filesystem
[  292.876789] FAT-fs (loop4): bogus number of reserved sectors
[  292.882860] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (116 sectors)
[  292.893057] FAT-fs (loop4): Can't find a valid FAT filesystem
20:28:51 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x70, &(0x7f0000000100), &(0x7f0000000140)=0x20)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:28:51 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:28:51 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
pread64(0xffffffffffffffff, &(0x7f0000df6000), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000040)=""/206, 0xce)

20:28:51 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
poll(&(0x7f00000000c0)=[{}], 0x1, 0x0)

20:28:51 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@loopback}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local}, @mark={0xc}]}, 0x110}}, 0x0)

20:28:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="eb3c90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]})

20:28:51 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da20}}, 0x14}}, 0x0)

20:28:51 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@updsa={0x110, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@loopback}, {@in6, 0x0, 0x2b}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@local}, @mark={0xc}]}, 0x110}}, 0x0)

20:28:51 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8, 0x8000)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0xfff, 0x4, 0x1})
socket$inet6(0xa, 0x0, 0x5)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000800)={0x1b, 0x4})
fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0xd)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket$pptp(0x18, 0x1, 0x2)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r2, 0x5605)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8001, 0x1f, 0x1}, &(0x7f0000000340)=0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2, &(0x7f0000000280)=""/93, 0xffffffffffffff65}}], 0x1, 0x40000022, &(0x7f0000000680)={0x77359400})
sendto$llc(r4, &(0x7f0000000080)="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", 0x120, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

20:28:51 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
pread64(0xffffffffffffffff, &(0x7f0000df6000), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000040)=""/206, 0xce)

[  293.366156] mip6: mip6_rthdr_init_state: state's mode is not 2: 0
[  293.374129] FAT-fs (loop4): bogus number of reserved sectors
[  293.380172] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (116 sectors)
[  293.390444] FAT-fs (loop4): Can't find a valid FAT filesystem
20:28:51 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18)

20:28:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="eb3c90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]})

[  293.555633] mip6: mip6_rthdr_init_state: state's mode is not 2: 0
[  293.648800] FAT-fs (loop4): bogus number of reserved sectors
[  293.654801] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (116 sectors)
[  293.665169] FAT-fs (loop4): Can't find a valid FAT filesystem
20:28:52 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001340), 0x4)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

20:28:52 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da20}}, 0x14}}, 0x0)

20:28:52 executing program 1:
getrandom(&(0x7f0000001740)=""/40, 0x102ca, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000440)=""/149, 0x95)

20:28:52 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
pread64(0xffffffffffffffff, &(0x7f0000df6000), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000040)=""/206, 0xce)

20:28:52 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x70, &(0x7f0000000100), &(0x7f0000000140)=0x20)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:28:52 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18)

20:28:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe803, 0x1, &(0x7f0000000440)=[{&(0x7f0000010000)="eb3c90", 0x3}], 0x0, &(0x7f0000000080)={[{@fat=@dos1xfloppy='dos1xfloppy'}]})

20:28:52 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da20}}, 0x14}}, 0x0)

20:28:52 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810946b61e33a4d9205820000c300000000000000000000000004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006301"], &(0x7f0000000000)="47504c00bd304702525f484f89db96dd6ca64da40ff023122e60f6", 0x0, 0xce, &(0x7f0000001b80)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48)

20:28:52 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00')
pread64(0xffffffffffffffff, &(0x7f0000df6000), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000040)=""/206, 0xce)

20:28:52 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da20}}, 0x14}}, 0x0)

20:28:52 executing program 7:
r0 = socket$inet(0x2, 0x100000002, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f0c000)=0x2, 0x4)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)

[  294.284180] FAT-fs (loop4): bogus number of reserved sectors
[  294.290316] FAT-fs (loop4): This looks like a DOS 1.x volume, but isn't a recognized floppy size (116 sectors)
[  294.300531] FAT-fs (loop4): Can't find a valid FAT filesystem
20:28:53 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8, 0x8000)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0xfff, 0x4, 0x1})
socket$inet6(0xa, 0x0, 0x5)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000800)={0x1b, 0x4})
fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0xd)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket$pptp(0x18, 0x1, 0x2)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r2, 0x5605)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8001, 0x1f, 0x1}, &(0x7f0000000340)=0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2, &(0x7f0000000280)=""/93, 0xffffffffffffff65}}], 0x1, 0x40000022, &(0x7f0000000680)={0x77359400})
sendto$llc(r4, &(0x7f0000000080)="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", 0x120, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

20:28:53 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810946b61e33a4d9205820000c300000000000000000000000004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006301"], &(0x7f0000000000)="47504c00bd304702525f484f89db96dd6ca64da40ff023122e60f6", 0x0, 0xce, &(0x7f0000001b80)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48)

20:28:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x84f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f01c8f966baf80cb8fe0aa785ef66bafc0c66b8280066efc4e1f9f7da36360f01ca640f0131b9800000c00f3235004000000f30b9e90a00000f320f9f2b440f20c03508000000440f22c0", 0x4b}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:53 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18)

20:28:53 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001340), 0x4)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

20:28:53 executing program 7:
r0 = socket$inet(0x2, 0x100000002, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f0c000)=0x2, 0x4)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)

20:28:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

20:28:53 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810946b61e33a4d9205820000c300000000000000000000000004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006301"], &(0x7f0000000000)="47504c00bd304702525f484f89db96dd6ca64da40ff023122e60f6", 0x0, 0xce, &(0x7f0000001b80)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48)

20:28:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

20:28:53 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-asm,ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18)

20:28:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x84f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f01c8f966baf80cb8fe0aa785ef66bafc0c66b8280066efc4e1f9f7da36360f01ca640f0131b9800000c00f3235004000000f30b9e90a00000f320f9f2b440f20c03508000000440f22c0", 0x4b}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:53 executing program 7:
r0 = socket$inet(0x2, 0x100000002, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f0c000)=0x2, 0x4)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)

20:28:53 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1810946b61e33a4d9205820000c300000000000000000000000004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006301"], &(0x7f0000000000)="47504c00bd304702525f484f89db96dd6ca64da40ff023122e60f6", 0x0, 0xce, &(0x7f0000001b80)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48)

20:28:53 executing program 6:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0)

20:28:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

[  295.452276] IPVS: ftp: loaded support on port[0] = 21
[  295.512618] IPVS: ftp: loaded support on port[0] = 21
20:28:54 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8, 0x8000)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0xfff, 0x4, 0x1})
socket$inet6(0xa, 0x0, 0x5)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000800)={0x1b, 0x4})
fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0xd)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket$pptp(0x18, 0x1, 0x2)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r2, 0x5605)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8001, 0x1f, 0x1}, &(0x7f0000000340)=0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2, &(0x7f0000000280)=""/93, 0xffffffffffffff65}}], 0x1, 0x40000022, &(0x7f0000000680)={0x77359400})
sendto$llc(r4, &(0x7f0000000080)="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", 0x120, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

20:28:54 executing program 7:
r0 = socket$inet(0x2, 0x100000002, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f0c000)=0x2, 0x4)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0)

20:28:54 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})
sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback}, 0x80)

20:28:54 executing program 6:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0)

20:28:54 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x8000000000000002, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

20:28:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x84f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f01c8f966baf80cb8fe0aa785ef66bafc0c66b8280066efc4e1f9f7da36360f01ca640f0131b9800000c00f3235004000000f30b9e90a00000f320f9f2b440f20c03508000000440f22c0", 0x4b}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:54 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c23c8a000180c200000086dd603e215b00440000fe80001a0000000000000000000000bb000000000000000000000000000000000420880b0000000000000800000086dd080088be0000000010000000010000ff00000000080022eb"], &(0x7f0000001640))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18)
ioctl(r0, 0x800000000008982, &(0x7f0000000080))

20:28:54 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x0)

20:28:54 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0)
fallocate(r0, 0x40, 0x0, 0x102)

20:28:54 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0)
fallocate(r0, 0x40, 0x0, 0x102)

20:28:54 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0x200000000a1}]}, 0x10)
sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="20d6dac772b6f65cc7c3fc9bf8d917fbd5bd28cd6ad9243ec3c3fc41fe4295b32b630b3e888a8d0eb1abd9d081c0c6655507c293ed17dcc8e25f2cb85d0e732ff34d9f574cdd31597a5e3a688fff4a8f31474711e4b8f7ab05068770f885c03286fadc1d0fd02098bd981aaf152f2da86443cc605a5cb9a63475b63d354cb1f158bd", 0x82, 0x1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000180))

20:28:54 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x8000000000000002, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

20:28:54 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0)

20:28:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x84f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f01c8f966baf80cb8fe0aa785ef66bafc0c66b8280066efc4e1f9f7da36360f01ca640f0131b9800000c00f3235004000000f30b9e90a00000f320f9f2b440f20c03508000000440f22c0", 0x4b}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:54 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000040)=0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1}, 0x14)

20:28:54 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0)
fallocate(r0, 0x40, 0x0, 0x102)

20:28:55 executing program 0:
r0 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8, 0x8000)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0xfff, 0x4, 0x1})
socket$inet6(0xa, 0x0, 0x5)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000800)={0x1b, 0x4})
fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0xd)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket$pptp(0x18, 0x1, 0x2)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0)
ioctl$VT_RELDISP(r2, 0x5605)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8001, 0x1f, 0x1}, &(0x7f0000000340)=0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2, &(0x7f0000000280)=""/93, 0xffffffffffffff65}}], 0x1, 0x40000022, &(0x7f0000000680)={0x77359400})
sendto$llc(r4, &(0x7f0000000080)="fd56b113ee5dc5b59c8f56f8b4182ad1d726c1bae545e63d665c2bfe32ed59a11b887ee3c6dc05a328a82c1813a4d4e91220a3dc6d1db1928da4e26c0518b0e6649ca952bb47e621dd7db13944ec786d37aba5087dce9168039ef92b265c293b9043163f5fad67aba28ea08c21691529ba62ea21dce97070d7e89bc3065b2caf6ae8f701c26664cb46a21946eaee2cd0ccd9083874be45da95b3c5e3128a4caeed5d00da738f5c937052109a650deac764dec5ded45a463eaf6231721f59c8dc342f820024f53f87fa54cac62182636b35c33b886a339c4d288f3db0a61fbc77900a88108cdd189863b887ef1a0b327dc85510276fefcb6a8b65e6b6d4db0afefee78798dd1955dd8b0688000000000000000000000000000000000000000000", 0x120, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)

20:28:55 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x8000000000000002, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

20:28:55 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0)

20:28:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:55 executing program 6:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0)

20:28:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:55 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0)
fallocate(r0, 0x40, 0x0, 0x102)

20:28:55 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000040)=0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1}, 0x14)

[  296.490473] sctp: [Deprecated]: syz-executor3 (pid 20285) Use of int in maxseg socket option.
[  296.490473] Use struct sctp_assoc_value instead
[  296.504965] sctp: [Deprecated]: syz-executor3 (pid 20285) Use of int in maxseg socket option.
[  296.504965] Use struct sctp_assoc_value instead
20:28:55 executing program 6:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0)

20:28:55 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0x8000000000000002, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000000), 0x4)

20:28:55 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0)

[  296.612430] IPVS: ftp: loaded support on port[0] = 21
20:28:55 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:55 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000040)=0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1}, 0x14)

[  296.719937] sctp: [Deprecated]: syz-executor3 (pid 20315) Use of int in maxseg socket option.
[  296.719937] Use struct sctp_assoc_value instead
20:28:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}]})
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000001600)='./file0\x00', 0x0)

[  296.913024] sctp: [Deprecated]: syz-executor3 (pid 20336) Use of int in maxseg socket option.
[  296.913024] Use struct sctp_assoc_value instead
[  296.938668] FAT-fs (loop1): bogus number of reserved sectors
[  296.944581] FAT-fs (loop1): Can't find a valid FAT filesystem
[  297.265532] IPVS: ftp: loaded support on port[0] = 21
[  297.267874] IPVS: ftp: loaded support on port[0] = 21
20:28:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000040)=0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1}, 0x14)

20:28:56 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0)

20:28:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:56 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

20:28:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

20:28:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:56 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:56 executing program 0:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x26)

[  297.683525] sctp: [Deprecated]: syz-executor3 (pid 20363) Use of int in maxseg socket option.
[  297.683525] Use struct sctp_assoc_value instead
[  297.684383] IPVS: ftp: loaded support on port[0] = 21
[  297.715135] IPVS: ftp: loaded support on port[0] = 21
20:28:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

20:28:56 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0xfffffc99)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

20:28:56 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

20:28:56 executing program 0:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x26)

20:28:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000500)="025cc83d6d345f8f762070")
r1 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)})
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000040)='d'})

20:28:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:56 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
unshare(0x40000000)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)

20:28:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x30, 0x18, 0x1, 0x0, 0x0, {0x7}, [@typed={0xc, 0x3, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}}, 0x0)

20:28:56 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0xfffffc99)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

20:28:56 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

20:28:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

20:28:56 executing program 0:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x26)

20:28:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000500)="025cc83d6d345f8f762070")
r1 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)})
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000040)='d'})

[  298.032954] IPVS: ftp: loaded support on port[0] = 21
[  298.043088] netlink: 'syz-executor2': attribute type 3 has an invalid length.
[  298.050519] netlink: 'syz-executor2': attribute type 6 has an invalid length.
20:28:56 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0xfffffc99)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

20:28:56 executing program 4:
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @local}, {0xa, 0x0, 0x6}, 0x100, [0x0, 0x2]}, 0x5c)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20)

20:28:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x30, 0x18, 0x1, 0x0, 0x0, {0x7}, [@typed={0xc, 0x3, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}}, 0x0)

20:28:56 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

20:28:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000500)="025cc83d6d345f8f762070")
r1 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)})
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000040)='d'})

20:28:56 executing program 0:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x26)

20:28:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc)

20:28:56 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000300)='gre0\x00')

20:28:56 executing program 4:
syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @link_local, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "c417098b9ea624569a25b040fd884594e4bcaa7d0cba7bdea51c8404f4d28c766d8dd5cb39134dadde5c5286ea9a832e32f7968a32c3d4d5e2a6520e2effb6ce"}}}}, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, "03"}], 0x18}}], 0x2, 0x0)

20:28:56 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0xfffffc99)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

20:28:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0xffff)
fallocate(r1, 0x3, 0x5e00, 0x2cbd)
lseek(r1, 0x0, 0x3)

[  298.334107] netlink: 'syz-executor2': attribute type 3 has an invalid length.
[  298.341548] netlink: 'syz-executor2': attribute type 6 has an invalid length.
20:28:56 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000300)='gre0\x00')

20:28:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gretap0\x00'})

20:28:56 executing program 1:
r0 = timerfd_create(0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x1c9c380}, {0x0, 0x5}}, &(0x7f0000005fe0))
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080))

20:28:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000500)="025cc83d6d345f8f762070")
r1 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)})
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000040)='d'})

20:28:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x30, 0x18, 0x1, 0x0, 0x0, {0x7}, [@typed={0xc, 0x3, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}}, 0x0)

20:28:57 executing program 4:
syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @link_local, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "c417098b9ea624569a25b040fd884594e4bcaa7d0cba7bdea51c8404f4d28c766d8dd5cb39134dadde5c5286ea9a832e32f7968a32c3d4d5e2a6520e2effb6ce"}}}}, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, "03"}], 0x18}}], 0x2, 0x0)

20:28:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000300)='gre0\x00')

20:28:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gretap0\x00'})

20:28:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:57 executing program 1:
r0 = timerfd_create(0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x1c9c380}, {0x0, 0x5}}, &(0x7f0000005fe0))
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080))

20:28:57 executing program 3:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0xffff)
fallocate(r1, 0x3, 0x5e00, 0x2cbd)
lseek(r1, 0x0, 0x3)

[  298.616755] netlink: 'syz-executor2': attribute type 3 has an invalid length.
[  298.624135] netlink: 'syz-executor2': attribute type 6 has an invalid length.
20:28:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x30, 0x18, 0x1, 0x0, 0x0, {0x7}, [@typed={0xc, 0x3, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}}, 0x0)

20:28:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000300)='gre0\x00')

20:28:57 executing program 4:
syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @link_local, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "c417098b9ea624569a25b040fd884594e4bcaa7d0cba7bdea51c8404f4d28c766d8dd5cb39134dadde5c5286ea9a832e32f7968a32c3d4d5e2a6520e2effb6ce"}}}}, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, "03"}], 0x18}}], 0x2, 0x0)

20:28:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gretap0\x00'})

20:28:57 executing program 1:
r0 = timerfd_create(0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x1c9c380}, {0x0, 0x5}}, &(0x7f0000005fe0))
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080))

20:28:57 executing program 3:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0xffff)
fallocate(r1, 0x3, 0x5e00, 0x2cbd)
lseek(r1, 0x0, 0x3)

[  298.835994] netlink: 'syz-executor2': attribute type 3 has an invalid length.
[  298.843411] netlink: 'syz-executor2': attribute type 6 has an invalid length.
20:28:57 executing program 2:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
stat(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
chown(&(0x7f0000000200)='./control\x00', 0x0, r1)
open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0xf6ffffff)

20:28:57 executing program 4:
syz_emit_ethernet(0x56, &(0x7f0000000000)={@empty, @link_local, [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "c417098b9ea624569a25b040fd884594e4bcaa7d0cba7bdea51c8404f4d28c766d8dd5cb39134dadde5c5286ea9a832e32f7968a32c3d4d5e2a6520e2effb6ce"}}}}, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=[{0x18, 0x1, 0x1, "03"}], 0x18}}], 0x2, 0x0)

20:28:57 executing program 1:
r0 = timerfd_create(0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x1c9c380}, {0x0, 0x5}}, &(0x7f0000005fe0))
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080))

20:28:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6gretap0\x00'})

20:28:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:57 executing program 3:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 2:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0xffff)
fallocate(r1, 0x3, 0x5e00, 0x2cbd)
lseek(r1, 0x0, 0x3)

20:28:57 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x303}, 0x10)

20:28:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
stat(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
chown(&(0x7f0000000200)='./control\x00', 0x0, r1)
open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0xf6ffffff)

20:28:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000002c0)=[@flat], &(0x7f0000000380)=[0x28]}}], 0x0, 0x0, &(0x7f0000000280)})

20:28:57 executing program 3:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0xe, 0x6, @local}, 0x10)

20:28:57 executing program 2:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:28:57 executing program 6:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000))

20:28:57 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x303}, 0x10)

[  299.289245] binder: 20569:20572 got transaction with invalid offset (40, min 0 max 24) or object.
[  299.300353] binder: 20569:20572 transaction failed 29201/-22, size 24-8 line 3030
[  299.311208] binder_alloc: binder_alloc_mmap_handler: 20569 20001000-20004000 already mapped failed -16
20:28:57 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
stat(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
chown(&(0x7f0000000200)='./control\x00', 0x0, r1)
open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0xf6ffffff)

20:28:57 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

[  299.337011] binder: BINDER_SET_CONTEXT_MGR already set
[  299.356113] binder: 20569:20572 ioctl 40046207 0 returned -16
[  299.366438] binder_alloc: 20569: binder_alloc_buf, no vma
[  299.372186] binder: 20569:20574 transaction failed 29189/-3, size 24-8 line 2967
20:28:57 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0xe, 0x6, @local}, 0x10)

20:28:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000002c0)=[@flat], &(0x7f0000000380)=[0x28]}}], 0x0, 0x0, &(0x7f0000000280)})

20:28:57 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200))
syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getpgrp(0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0)
read$eventfd(r1, &(0x7f0000e5aff8), 0xfffffc7a)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
poll(&(0x7f0000b28fe0), 0x0, 0xfffffffffffffff8)
tkill(0x0, 0x16)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB])

20:28:57 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

[  299.393462] binder: undelivered TRANSACTION_ERROR: 29201
[  299.399528] binder: undelivered TRANSACTION_ERROR: 29189
20:28:57 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x303}, 0x10)

20:28:57 executing program 6:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000))

20:28:58 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mkdir(&(0x7f0000000180)='./control\x00', 0x0)
chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb)
stat(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
chown(&(0x7f0000000200)='./control\x00', 0x0, r1)
open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0xf6ffffff)

20:28:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time'}}]})

[  299.579361] binder: 20600:20606 got transaction with invalid offset (40, min 0 max 24) or object.
[  299.592076] binder: 20600:20606 transaction failed 29201/-22, size 24-8 line 3030
20:28:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0xe, 0x6, @local}, 0x10)

20:28:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000002c0)=[@flat], &(0x7f0000000380)=[0x28]}}], 0x0, 0x0, &(0x7f0000000280)})

20:28:58 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x303}, 0x10)

20:28:58 executing program 6:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000))

[  299.626955] binder: undelivered TRANSACTION_ERROR: 29201
20:28:58 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

[  299.762956] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  299.770742] EXT4-fs (loop5): Invalid log block size: 3423666176
20:28:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0xe, 0x6, @local}, 0x10)

20:28:58 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x29a, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xddf8, 0x42)
fallocate(r0, 0x0, 0x0, 0x8)

[  299.808747] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  299.816440] EXT4-fs (loop5): Invalid log block size: 3423666176
20:28:58 executing program 6:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000000))

20:28:58 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time'}}]})

20:28:58 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, &(0x7f0000000080), 0x4)

[  299.858003] binder: 20631:20643 got transaction with invalid offset (40, min 0 max 24) or object.
[  299.892773] binder: 20631:20643 transaction failed 29201/-22, size 24-8 line 3030
[  299.916645] binder: undelivered TRANSACTION_ERROR: 29201
[  300.073315] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  300.080859] EXT4-fs (loop5): Invalid log block size: 3423666176
20:28:59 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, &(0x7f0000000080), 0x4)

20:28:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

20:28:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000780)={[{@discard_size={'\niscard'}}]})

20:28:59 executing program 1:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x14, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0x4207, r1)
tgkill(0x0, 0x0, 0x0)
ptrace$getregs(0x4209, r1, 0x730004, &(0x7f0000000000)=""/38)

20:28:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000002c0)=[@flat], &(0x7f0000000380)=[0x28]}}], 0x0, 0x0, &(0x7f0000000280)})

20:28:59 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x29a, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xddf8, 0x42)
fallocate(r0, 0x0, 0x0, 0x8)

20:28:59 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000002640)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x11d, 0x1d01}}, 0x1c}}, 0x0)

20:28:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time'}}]})

[  300.698190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
[  300.707318] binder: 20679:20686 got transaction with invalid offset (40, min 0 max 24) or object.
[  300.729178] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  300.736743] EXT4-fs (loop5): Invalid log block size: 3423666176
20:28:59 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, &(0x7f0000000080), 0x4)

20:28:59 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000002640)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x11d, 0x1d01}}, 0x1c}}, 0x0)

20:28:59 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

20:28:59 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000100)}, 0x78)
close(r3)
dup3(r1, r2, 0x0)

[  300.745703] binder: 20679:20686 transaction failed 29201/-22, size 24-8 line 3030
20:28:59 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x29a, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xddf8, 0x42)
fallocate(r0, 0x0, 0x0, 0x8)

20:28:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@max_batch_time={'max_batch_time'}}]})

20:28:59 executing program 0:
unshare(0x2040600)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
fgetxattr(r0, &(0x7f0000000140)=@random={'system.', '*\x00'}, &(0x7f0000000180)=""/2, 0x2)

[  300.776735] binder: undelivered TRANSACTION_ERROR: 29201
[  300.829469] jfs: Unrecognized mount option "
[  300.829469] iscard=0x0000000000000000" or missing value
20:28:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000780)={[{@discard_size={'\niscard'}}]})

20:28:59 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, &(0x7f0000000080), 0x4)

[  300.873441] jfs: Unrecognized mount option "
[  300.873441] iscard=0x0000000000000000" or missing value
[  300.895696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
20:28:59 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000002640)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x11d, 0x1d01}}, 0x1c}}, 0x0)

20:28:59 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x29a, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xddf8, 0x42)
fallocate(r0, 0x0, 0x0, 0x8)

20:28:59 executing program 0:
unshare(0x2040600)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
fgetxattr(r0, &(0x7f0000000140)=@random={'system.', '*\x00'}, &(0x7f0000000180)=""/2, 0x2)

20:28:59 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000001c40)=""/4096, 0xd0}], 0x1)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x3d2)
recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/80, 0x50}], 0x1, &(0x7f0000001b40)=""/150, 0x96}, 0x0)
sendto$inet(r0, &(0x7f0000000140)="c2", 0x1, 0x0, 0x0, 0x0)

[  301.001818] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  301.009392] EXT4-fs (loop5): Invalid log block size: 3423666176
20:28:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
ftruncate(r1, 0x800)
write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000440)=""/225, 0xfffffffffffffedf, &(0x7f0000000000)=""/8}}, 0x68)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="80", 0x1}])

20:28:59 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0xfffffffffffffffe, &(0x7f0000000080), 0x237)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="263ef30f524d02baf80c66b8c6b3c88b66efbafc0cb8ce5def3665dec9f4260f01ca66b9800000c00f326635000800000f306665670f1f00670f017cec35f40fb39adc00", 0x44}], 0x1, 0x0, &(0x7f0000000340), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:28:59 executing program 0:
unshare(0x2040600)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
fgetxattr(r0, &(0x7f0000000140)=@random={'system.', '*\x00'}, &(0x7f0000000180)=""/2, 0x2)

20:28:59 executing program 7:
symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '@!md5sumselfproc\x00'}, &(0x7f0000000200)=""/4096, 0x1000)

[  301.132710] jfs: Unrecognized mount option "
[  301.132710] iscard=0x0000000000000000" or missing value
[  301.163296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
20:28:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000780)={[{@discard_size={'\niscard'}}]})

20:28:59 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000002640)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x11d, 0x1d01}}, 0x1c}}, 0x0)

[  301.244713] FAT-fs (loop5): Directory bread(block 128) failed
[  301.250844] FAT-fs (loop5): Directory bread(block 129) failed
[  301.256949] FAT-fs (loop5): Directory bread(block 130) failed
[  301.263764] FAT-fs (loop5): Directory bread(block 131) failed
[  301.270672] FAT-fs (loop5): Directory bread(block 132) failed
[  301.276707] FAT-fs (loop5): Directory bread(block 133) failed
[  301.282934] FAT-fs (loop5): Directory bread(block 134) failed
[  301.289024] FAT-fs (loop5): Directory bread(block 135) failed
[  301.295251] FAT-fs (loop5): Directory bread(block 136) failed
[  301.301356] FAT-fs (loop5): Directory bread(block 137) failed
[  301.324189] attempt to access beyond end of device
[  301.329340] loop5: rw=2049, want=310, limit=128
[  301.334096] buffer_io_error: 30 callbacks suppressed
[  301.334112] Buffer I/O error on dev loop5, logical block 309, lost async page write
[  301.347520] attempt to access beyond end of device
[  301.352668] loop5: rw=2049, want=311, limit=128
[  301.357923] Buffer I/O error on dev loop5, logical block 310, lost async page write
[  301.366292] attempt to access beyond end of device
[  301.371603] loop5: rw=2049, want=312, limit=128
[  301.376368] Buffer I/O error on dev loop5, logical block 311, lost async page write
[  301.384564] attempt to access beyond end of device
[  301.389719] loop5: rw=2049, want=313, limit=128
[  301.394467] Buffer I/O error on dev loop5, logical block 312, lost async page write
[  301.402860] attempt to access beyond end of device
[  301.407932] loop5: rw=2049, want=326, limit=128
[  301.412698] Buffer I/O error on dev loop5, logical block 325, lost async page write
[  301.423287] attempt to access beyond end of device
[  301.428417] loop5: rw=0, want=310, limit=128
[  301.432934] Buffer I/O error on dev loop5, logical block 309, async page read
[  301.440996] attempt to access beyond end of device
[  301.446063] loop5: rw=0, want=311, limit=128
[  301.450519] Buffer I/O error on dev loop5, logical block 310, async page read
[  301.457974] attempt to access beyond end of device
[  301.463033] loop5: rw=0, want=312, limit=128
[  301.467617] Buffer I/O error on dev loop5, logical block 311, async page read
[  301.475001] attempt to access beyond end of device
[  301.480156] loop5: rw=0, want=313, limit=128
[  301.484725] Buffer I/O error on dev loop5, logical block 312, async page read
[  301.492227] attempt to access beyond end of device
[  301.497279] loop5: rw=0, want=326, limit=128
[  301.501717] Buffer I/O error on dev loop5, logical block 325, async page read
[  301.520951] attempt to access beyond end of device
[  301.526063] loop5: rw=2049, want=330, limit=128
[  301.650656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
[  301.685993] jfs: Unrecognized mount option "
[  301.685993] iscard=0x0000000000000000" or missing value
20:29:00 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000100)}, 0x78)
close(r3)
dup3(r1, r2, 0x0)

20:29:00 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0xfffffffffffffffe, &(0x7f0000000080), 0x237)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="263ef30f524d02baf80c66b8c6b3c88b66efbafc0cb8ce5def3665dec9f4260f01ca66b9800000c00f326635000800000f306665670f1f00670f017cec35f40fb39adc00", 0x44}], 0x1, 0x0, &(0x7f0000000340), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:29:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
ftruncate(r1, 0x800)
write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000440)=""/225, 0xfffffffffffffedf, &(0x7f0000000000)=""/8}}, 0x68)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="80", 0x1}])

20:29:00 executing program 0:
unshare(0x2040600)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
fgetxattr(r0, &(0x7f0000000140)=@random={'system.', '*\x00'}, &(0x7f0000000180)=""/2, 0x2)

20:29:00 executing program 7:
symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '@!md5sumselfproc\x00'}, &(0x7f0000000200)=""/4096, 0x1000)

20:29:00 executing program 6:
msgrcv(0x0, &(0x7f0000000100)={0x0, ""/192}, 0xc8, 0x0, 0x1000)
msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0)

20:29:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000780)={[{@discard_size={'\niscard'}}]})

20:29:00 executing program 7:
symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '@!md5sumselfproc\x00'}, &(0x7f0000000200)=""/4096, 0x1000)

20:29:00 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="3cbf2743", 0x4)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10)
recvmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/165, 0xa5}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380})

[  301.848423] jfs: Unrecognized mount option "
[  301.848423] iscard=0x0000000000000000" or missing value
[  301.880134] FAT-fs (loop5): Directory bread(block 128) failed
[  301.901458] FAT-fs (loop5): Directory bread(block 129) failed
[  301.912440] FAT-fs (loop5): Directory bread(block 130) failed
[  301.943038] FAT-fs (loop5): Directory bread(block 131) failed
[  301.957694] FAT-fs (loop5): Directory bread(block 132) failed
[  301.969820] FAT-fs (loop5): Directory bread(block 133) failed
[  301.982015] FAT-fs (loop5): Directory bread(block 134) failed
[  301.994183] FAT-fs (loop5): Directory bread(block 135) failed
[  302.008206] FAT-fs (loop5): Directory bread(block 136) failed
[  302.023252] FAT-fs (loop5): Directory bread(block 137) failed
[  302.091948] attempt to access beyond end of device
[  302.096970] loop5: rw=2049, want=290, limit=128
[  302.104769] attempt to access beyond end of device
[  302.109771] loop5: rw=2049, want=291, limit=128
[  302.114555] attempt to access beyond end of device
[  302.119531] loop5: rw=2049, want=292, limit=128
[  302.125057] attempt to access beyond end of device
[  302.130042] loop5: rw=2049, want=293, limit=128
[  302.135187] attempt to access beyond end of device
20:29:00 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)="000000800000808000")

20:29:00 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0)

20:29:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
fallocate(r0, 0x41, 0x0, 0x1)

20:29:00 executing program 7:
symlink(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
setresuid(0x0, 0xee00, 0x0)
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', '@!md5sumselfproc\x00'}, &(0x7f0000000200)=""/4096, 0x1000)

20:29:00 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0xfffffffffffffffe, &(0x7f0000000080), 0x237)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="263ef30f524d02baf80c66b8c6b3c88b66efbafc0cb8ce5def3665dec9f4260f01ca66b9800000c00f326635000800000f306665670f1f00670f017cec35f40fb39adc00", 0x44}], 0x1, 0x0, &(0x7f0000000340), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  302.140206] loop5: rw=2049, want=310, limit=128
[  302.149418] attempt to access beyond end of device
[  302.154436] loop5: rw=0, want=290, limit=128
[  302.158968] attempt to access beyond end of device
[  302.163961] loop5: rw=0, want=291, limit=128
[  302.168537] attempt to access beyond end of device
[  302.173537] loop5: rw=0, want=292, limit=128
[  302.178130] attempt to access beyond end of device
[  302.183141] loop5: rw=0, want=293, limit=128
20:29:00 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
ftruncate(r1, 0x800)
write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000440)=""/225, 0xfffffffffffffedf, &(0x7f0000000000)=""/8}}, 0x68)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="80", 0x1}])

[  302.187893] attempt to access beyond end of device
[  302.193155] loop5: rw=0, want=310, limit=128
20:29:00 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0)

[  302.451705] FAT-fs (loop5): Directory bread(block 128) failed
[  302.496477] FAT-fs (loop5): Directory bread(block 129) failed
[  302.511648] FAT-fs (loop5): Directory bread(block 130) failed
[  302.528497] FAT-fs (loop5): Directory bread(block 131) failed
[  302.543671] FAT-fs (loop5): Directory bread(block 132) failed
[  302.558317] FAT-fs (loop5): Directory bread(block 133) failed
[  302.573426] FAT-fs (loop5): Directory bread(block 134) failed
[  302.587251] FAT-fs (loop5): Directory bread(block 135) failed
[  302.602974] FAT-fs (loop5): Directory bread(block 136) failed
[  302.616921] FAT-fs (loop5): Directory bread(block 137) failed
[  302.667566] attempt to access beyond end of device
[  302.672611] loop5: rw=2049, want=310, limit=128
[  302.681370] attempt to access beyond end of device
[  302.686435] loop5: rw=2049, want=311, limit=128
[  302.691216] attempt to access beyond end of device
[  302.696184] loop5: rw=2049, want=312, limit=128
[  302.700930] attempt to access beyond end of device
[  302.705984] loop5: rw=2049, want=313, limit=128
[  302.710778] attempt to access beyond end of device
[  302.715768] loop5: rw=2049, want=326, limit=128
[  302.725148] attempt to access beyond end of device
[  302.730280] loop5: rw=0, want=310, limit=128
[  302.734819] attempt to access beyond end of device
[  302.739804] loop5: rw=0, want=311, limit=128
[  302.744396] attempt to access beyond end of device
[  302.749424] loop5: rw=0, want=312, limit=128
[  302.753986] attempt to access beyond end of device
[  302.759049] loop5: rw=0, want=313, limit=128
[  302.763584] attempt to access beyond end of device
[  302.768572] loop5: rw=0, want=326, limit=128
20:29:01 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000100)}, 0x78)
close(r3)
dup3(r1, r2, 0x0)

20:29:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
fallocate(r0, 0x41, 0x0, 0x1)

20:29:01 executing program 7:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
close(r1)
r2 = memfd_create(&(0x7f0000000100)='bdev$-\x00', 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0)
write$9p(r2, &(0x7f0000000080), 0x0)
write$binfmt_elf32(r1, &(0x7f0000002000)=ANY=[], 0x0)
close(r0)

20:29:01 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)="000000800000808000")

20:29:01 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0)

20:29:01 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0xfffffffffffffffe, &(0x7f0000000080), 0x237)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="263ef30f524d02baf80c66b8c6b3c88b66efbafc0cb8ce5def3665dec9f4260f01ca66b9800000c00f326635000800000f306665670f1f00670f017cec35f40fb39adc00", 0x44}], 0x1, 0x0, &(0x7f0000000340), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:29:01 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x6, &(0x7f0000000080)=<r2=>0x0)
ftruncate(r1, 0x800)
write$vnet(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000440)=""/225, 0xfffffffffffffedf, &(0x7f0000000000)=""/8}}, 0x68)
io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)="80", 0x1}])

20:29:01 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0)

[  302.944889] FAT-fs (loop5): Directory bread(block 128) failed
[  302.960277] FAT-fs (loop5): Directory bread(block 129) failed
[  302.984290] FAT-fs (loop5): Directory bread(block 130) failed
[  303.001919] FAT-fs (loop5): Directory bread(block 131) failed
[  303.018020] FAT-fs (loop5): Directory bread(block 132) failed
[  303.026612] hrtimer: interrupt took 181799 ns
[  303.033435] FAT-fs (loop5): Directory bread(block 133) failed
[  303.045746] FAT-fs (loop5): Directory bread(block 134) failed
20:29:01 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="3cbf2743", 0x4)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10)
recvmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/165, 0xa5}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380})

20:29:01 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)="000000800000808000")

20:29:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
fallocate(r0, 0x41, 0x0, 0x1)

20:29:01 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x9f, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cpuset\x00')
write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='s'], 0x1)
sendfile(r1, r2, &(0x7f0000000080), 0x50000000000443)

[  303.056857] FAT-fs (loop5): Directory bread(block 135) failed
[  303.070373] FAT-fs (loop5): Directory bread(block 136) failed
[  303.081434] FAT-fs (loop5): Directory bread(block 137) failed
[  303.144243] attempt to access beyond end of device
[  303.149282] loop5: rw=2049, want=310, limit=128
[  303.157673] attempt to access beyond end of device
[  303.162680] loop5: rw=2049, want=311, limit=128
[  303.167612] attempt to access beyond end of device
[  303.172601] loop5: rw=2049, want=312, limit=128
20:29:01 executing program 4:
syslog(0x3, 0x0, 0x0)

20:29:01 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x9f, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cpuset\x00')
write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='s'], 0x1)
sendfile(r1, r2, &(0x7f0000000080), 0x50000000000443)

20:29:01 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)="000000800000808000")

[  303.192977] attempt to access beyond end of device
[  303.198143] loop5: rw=2049, want=313, limit=128
[  303.223237] attempt to access beyond end of device
[  303.228269] loop5: rw=2049, want=326, limit=128
20:29:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
fallocate(r0, 0x41, 0x0, 0x1)

[  303.247904] attempt to access beyond end of device
[  303.253009] loop5: rw=0, want=310, limit=128
[  303.266102] attempt to access beyond end of device
[  303.271130] loop5: rw=0, want=311, limit=128
[  303.276193] attempt to access beyond end of device
[  303.281221] loop5: rw=0, want=312, limit=128
[  303.285765] attempt to access beyond end of device
[  303.290766] loop5: rw=0, want=313, limit=128
[  303.307712] attempt to access beyond end of device
[  303.312751] loop5: rw=0, want=326, limit=128
20:29:02 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000100)}, 0x78)
close(r3)
dup3(r1, r2, 0x0)

20:29:02 executing program 4:
syslog(0x3, 0x0, 0x0)

20:29:02 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x9f, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cpuset\x00')
write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='s'], 0x1)
sendfile(r1, r2, &(0x7f0000000080), 0x50000000000443)

20:29:02 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000580)=0x19fc, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket(0x40000000015, 0x5, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/141, 0x8d, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x709000)
write(r0, &(0x7f0000000200)='s', 0x1)

20:29:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000780)=""/199, 0xc7, 0x0, &(0x7f0000000500)={0x2, 0x0, @remote}, 0x10)
recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000900)=""/236, 0xec}], 0x2, &(0x7f0000000300)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x3, &(0x7f0000000000)=""/41, 0x29}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400})
clock_gettime(0x0, &(0x7f0000000a00)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000002440)=""/249, 0xf9}], 0x5, &(0x7f0000002540)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004b80)=""/13, 0x1}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000005140)=""/118, 0x76}}, {{&(0x7f00000051c0)=@nl, 0x80, &(0x7f0000005580), 0x0, &(0x7f0000005600)}}], 0x4, 0x0, &(0x7f00000057c0)={0x0, r2+30000000})

20:29:02 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="180003000000010000000000000000000001080203000008000006000e640002b900020000000000000077a107567e5bdba17e19550055040082ec67a100020049fc2d63e00000000000141800d421f3ea66d4d94ac72f0a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c3165c287b7e75ab4f171793bca8171f33b4fbe8006bcb8", 0xc8)

20:29:02 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:29:02 executing program 4:
syslog(0x3, 0x0, 0x0)

[  303.814483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  303.845461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:29:02 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="3cbf2743", 0x4)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10)
recvmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/165, 0xa5}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380})

20:29:02 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="180003000000010000000000000000000001080203000008000006000e640002b900020000000000000077a107567e5bdba17e19550055040082ec67a100020049fc2d63e00000000000141800d421f3ea66d4d94ac72f0a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c3165c287b7e75ab4f171793bca8171f33b4fbe8006bcb8", 0xc8)

20:29:02 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x9f, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='cpuset\x00')
write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='s'], 0x1)
sendfile(r1, r2, &(0x7f0000000080), 0x50000000000443)

20:29:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000780)=""/199, 0xc7, 0x0, &(0x7f0000000500)={0x2, 0x0, @remote}, 0x10)
recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000900)=""/236, 0xec}], 0x2, &(0x7f0000000300)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x3, &(0x7f0000000000)=""/41, 0x29}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400})
clock_gettime(0x0, &(0x7f0000000a00)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000002440)=""/249, 0xf9}], 0x5, &(0x7f0000002540)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004b80)=""/13, 0x1}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000005140)=""/118, 0x76}}, {{&(0x7f00000051c0)=@nl, 0x80, &(0x7f0000005580), 0x0, &(0x7f0000005600)}}], 0x4, 0x0, &(0x7f00000057c0)={0x0, r2+30000000})

20:29:02 executing program 7:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:29:02 executing program 4:
syslog(0x3, 0x0, 0x0)

20:29:02 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000780)=""/199, 0xc7, 0x0, &(0x7f0000000500)={0x2, 0x0, @remote}, 0x10)
recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000900)=""/236, 0xec}], 0x2, &(0x7f0000000300)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x3, &(0x7f0000000000)=""/41, 0x29}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400})
clock_gettime(0x0, &(0x7f0000000a00)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000002440)=""/249, 0xf9}], 0x5, &(0x7f0000002540)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004b80)=""/13, 0x1}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000005140)=""/118, 0x76}}, {{&(0x7f00000051c0)=@nl, 0x80, &(0x7f0000005580), 0x0, &(0x7f0000005600)}}], 0x4, 0x0, &(0x7f00000057c0)={0x0, r2+30000000})

20:29:03 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="180003000000010000000000000000000001080203000008000006000e640002b900020000000000000077a107567e5bdba17e19550055040082ec67a100020049fc2d63e00000000000141800d421f3ea66d4d94ac72f0a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c3165c287b7e75ab4f171793bca8171f33b4fbe8006bcb8", 0xc8)

20:29:03 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}}, 0x0)

20:29:03 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:03 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000780)=""/199, 0xc7, 0x0, &(0x7f0000000500)={0x2, 0x0, @remote}, 0x10)
recvmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000480)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000900)=""/236, 0xec}], 0x2, &(0x7f0000000300)=""/109, 0x6d}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/40, 0x28}}], 0x2, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x3, &(0x7f0000000000)=""/41, 0x29}}, {{&(0x7f0000002600)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40), 0x0, &(0x7f0000000380)=""/205, 0xcd}}], 0x2, 0x0, &(0x7f00000000c0)={0x77359400})
clock_gettime(0x0, &(0x7f0000000a00)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/115, 0x73}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000002440)=""/249, 0xf9}], 0x5, &(0x7f0000002540)=""/38, 0x26}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000004b80)=""/13, 0x1}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000005140)=""/118, 0x76}}, {{&(0x7f00000051c0)=@nl, 0x80, &(0x7f0000005580), 0x0, &(0x7f0000005600)}}], 0x4, 0x0, &(0x7f00000057c0)={0x0, r2+30000000})

20:29:03 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000580)=0x19fc, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket(0x40000000015, 0x5, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/141, 0x8d, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x709000)
write(r0, &(0x7f0000000200)='s', 0x1)

20:29:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:03 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="180003000000010000000000000000000001080203000008000006000e640002b900020000000000000077a107567e5bdba17e19550055040082ec67a100020049fc2d63e00000000000141800d421f3ea66d4d94ac72f0a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c3165c287b7e75ab4f171793bca8171f33b4fbe8006bcb8", 0xc8)

20:29:03 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}}, 0x0)

20:29:03 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="3cbf2743", 0x4)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10)
recvmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/165, 0xa5}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380})

20:29:03 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:29:03 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:03 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}}, 0x0)

20:29:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

20:29:03 executing program 7:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:29:03 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xd}]}, 0x28}}, 0x0)

20:29:03 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:29:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

20:29:03 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:03 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e4398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})
close(r0)

20:29:04 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000580)=0x19fc, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket(0x40000000015, 0x5, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/141, 0x8d, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x709000)
write(r0, &(0x7f0000000200)='s', 0x1)

20:29:04 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:29:04 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n', 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f00000012c0)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/187, 0xbb}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

20:29:04 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000200))

20:29:04 executing program 7:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:29:04 executing program 6:
io_setup(0xba, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='sit0\x00', 0x10)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}])

20:29:04 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

20:29:04 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:29:04 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000200))

20:29:04 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n', 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f00000012c0)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/187, 0xbb}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

20:29:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x3, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0)

20:29:04 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000200))

20:29:04 executing program 6:
io_setup(0xba, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='sit0\x00', 0x10)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}])

20:29:04 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000001000000010000001300000000000000"], 0x18}, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

20:29:04 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n', 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f00000012c0)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/187, 0xbb}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

20:29:04 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000280), 0x80000000000036a, 0x7ffffff7)

20:29:05 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000580)=0x19fc, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket(0x40000000015, 0x5, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/141, 0x8d, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x709000)
write(r0, &(0x7f0000000200)='s', 0x1)

20:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x3, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0)

20:29:05 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000200))

20:29:05 executing program 6:
io_setup(0xba, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='sit0\x00', 0x10)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}])

20:29:05 executing program 7:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000100)=0x10)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

20:29:05 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n', 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f00000012c0)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/187, 0xbb}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

20:29:05 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:05 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000280), 0x80000000000036a, 0x7ffffff7)

20:29:05 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
close(r0)

20:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x3, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0)

20:29:05 executing program 6:
io_setup(0xba, &(0x7f00000000c0)=<r0=>0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='sit0\x00', 0x10)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}])

20:29:05 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/8, &(0x7f0000000240)=0x8)

20:29:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x3, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0)

20:29:05 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:05 executing program 6:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:05 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
close(r0)

20:29:06 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/8, &(0x7f0000000240)=0x8)

20:29:06 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000280), 0x80000000000036a, 0x7ffffff7)

20:29:06 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
close(r0)

20:29:06 executing program 6:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:06 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dffc, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[])
mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
userfaultfd(0x80000)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001740), 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

20:29:06 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:06 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
r1 = socket(0x1e, 0x5, 0x0)
dup2(r0, r1)
sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0)

20:29:06 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/8, &(0x7f0000000240)=0x8)

20:29:06 executing program 6:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:06 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
close(r0)

20:29:06 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f0000000280), 0x80000000000036a, 0x7ffffff7)

20:29:06 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000480)=0x301, 0x3f0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0), 0x8)

20:29:06 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/8, &(0x7f0000000240)=0x8)

20:29:06 executing program 1:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/94, 0x5e)
getdents(r0, &(0x7f00000003c0)=""/202, 0xca)

20:29:06 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:29:06 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
r1 = socket(0x1e, 0x5, 0x0)
dup2(r0, r1)
sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0)

20:29:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]})

20:29:06 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000480)=0x301, 0x3f0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0), 0x8)

[  308.354405] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value
20:29:06 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
r1 = socket(0x1e, 0x5, 0x0)
dup2(r0, r1)
sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0)

20:29:06 executing program 3:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(0xffffffffffffffff)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000002b80), 0x4)
dup2(r0, r1)

20:29:06 executing program 4:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:06 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dffc, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[])
mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
userfaultfd(0x80000)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001740), 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

20:29:06 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]})

20:29:06 executing program 1:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/94, 0x5e)
getdents(r0, &(0x7f00000003c0)=""/202, 0xca)

20:29:06 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0)

20:29:06 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000480)=0x301, 0x3f0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0), 0x8)

20:29:06 executing program 0:
r0 = socket(0x1e, 0x1, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
r1 = socket(0x1e, 0x5, 0x0)
dup2(r0, r1)
sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0)

20:29:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32=<r3=>r1, @ANYBLOB], &(0x7f0000000100)=0x8)
close(r2)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x300, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0)

20:29:07 executing program 4:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]})

20:29:07 executing program 7:
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000480)=0x301, 0x3f0)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0), 0x8)

20:29:07 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0)

20:29:07 executing program 1:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/94, 0x5e)
getdents(r0, &(0x7f00000003c0)=""/202, 0xca)

20:29:07 executing program 0:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:07 executing program 4:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:07 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dffc, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[])
mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
userfaultfd(0x80000)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001740), 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

20:29:07 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]})

20:29:07 executing program 0:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:07 executing program 4:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:07 executing program 7:
r0 = socket$inet6(0xa, 0x3, 0x1)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000002c0)=ANY=[])
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x6000)

20:29:07 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0)

20:29:07 executing program 1:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000340)=""/94, 0x5e)
getdents(r0, &(0x7f00000003c0)=""/202, 0xca)

20:29:07 executing program 6:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c96e5bde84a7", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

[  309.059099] FAT-fs (loop7): bogus number of reserved sectors
[  309.065061] FAT-fs (loop7): Can't find a valid FAT filesystem
[  309.147495] FAT-fs (loop7): bogus number of reserved sectors
[  309.153419] FAT-fs (loop7): Can't find a valid FAT filesystem
20:29:08 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32=<r3=>r1, @ANYBLOB], &(0x7f0000000100)=0x8)
close(r2)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x300, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0)

20:29:08 executing program 4:
syz_mount_image$bfs(&(0x7f0000000840)='bfs\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000001bc0), 0x8010, 0x0)

20:29:08 executing program 0:
r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000))
write$sndseq(r0, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd}], 0x30)

20:29:08 executing program 2:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43)
write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}})
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0)

20:29:08 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dffc, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[])
mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0)
userfaultfd(0x80000)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/audio\x00', 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000001740), 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

20:29:08 executing program 6:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c96e5bde84a7", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

20:29:08 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000000)=0xa2)

20:29:08 executing program 7:
r0 = socket$inet6(0xa, 0x3, 0x1)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000002c0)=ANY=[])
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x6000)

20:29:08 executing program 6:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c96e5bde84a7", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

20:29:08 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000000)=0xa2)

20:29:08 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x3, 0xec}, 0x8)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000480))
accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0))
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0, 0x40000104]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10)

20:29:08 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:29:08 executing program 4:
syz_mount_image$bfs(&(0x7f0000000840)='bfs\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000001bc0), 0x8010, 0x0)

[  309.759981] FAT-fs (loop7): bogus number of reserved sectors
[  309.765904] FAT-fs (loop7): Can't find a valid FAT filesystem
20:29:08 executing program 7:
r0 = socket$inet6(0xa, 0x3, 0x1)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000002c0)=ANY=[])
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x6000)

20:29:08 executing program 6:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="c96e5bde84a7", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

20:29:08 executing program 5:
syz_mount_image$hfs(&(0x7f00000026c0)='hfs\x00', &(0x7f0000002700)='./bus\x00', 0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a40)={[{@type={'type', 0x3d, "9d1000c1"}}]})

[  310.110343] FAT-fs (loop7): bogus number of reserved sectors
[  310.116330] FAT-fs (loop7): Can't find a valid FAT filesystem
[  310.133919] hfs: type requires a 4 character value
[  310.139107] hfs: unable to parse mount options
[  310.163977] hfs: type requires a 4 character value
[  310.169084] hfs: unable to parse mount options
20:29:09 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:29:09 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000000)=0xa2)

20:29:09 executing program 5:
syz_mount_image$hfs(&(0x7f00000026c0)='hfs\x00', &(0x7f0000002700)='./bus\x00', 0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a40)={[{@type={'type', 0x3d, "9d1000c1"}}]})

20:29:09 executing program 4:
syz_mount_image$bfs(&(0x7f0000000840)='bfs\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000001bc0), 0x8010, 0x0)

20:29:09 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x3, 0xec}, 0x8)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000480))
accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0))
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0, 0x40000104]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10)

20:29:09 executing program 6:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:29:09 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32=<r3=>r1, @ANYBLOB], &(0x7f0000000100)=0x8)
close(r2)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x300, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0)

20:29:09 executing program 7:
r0 = socket$inet6(0xa, 0x3, 0x1)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000002c0)=ANY=[])
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x6000)

20:29:09 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$packet_buf(r0, 0x111, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000000)=0xa2)

[  310.816441] FAT-fs (loop7): bogus number of reserved sectors
[  310.822325] FAT-fs (loop7): Can't find a valid FAT filesystem
20:29:09 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:29:09 executing program 6:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:29:09 executing program 4:
syz_mount_image$bfs(&(0x7f0000000840)='bfs\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f0000001bc0), 0x8010, 0x0)

[  310.863542] hfs: type requires a 4 character value
[  310.868559] hfs: unable to parse mount options
20:29:09 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x3, 0xec}, 0x8)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000480))
accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0))
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0, 0x40000104]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10)

20:29:09 executing program 7:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xc}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:29:09 executing program 5:
syz_mount_image$hfs(&(0x7f00000026c0)='hfs\x00', &(0x7f0000002700)='./bus\x00', 0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a40)={[{@type={'type', 0x3d, "9d1000c1"}}]})

20:29:09 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendfile(r1, r1, &(0x7f0000000040), 0x1)

20:29:09 executing program 6:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

[  311.249954] hfs: type requires a 4 character value
[  311.255089] hfs: unable to parse mount options
20:29:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)=ANY=[@ANYRES32=<r3=>r1, @ANYBLOB], &(0x7f0000000100)=0x8)
close(r2)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @rand_addr}, 0x10, &(0x7f0000000140), 0x300, &(0x7f0000000080)=[@sndrcv={0x30}], 0x30}], 0x1, 0x0)

20:29:10 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgid(r1)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:29:10 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendfile(r1, r1, &(0x7f0000000040), 0x1)

20:29:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45)
io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}])

20:29:10 executing program 5:
syz_mount_image$hfs(&(0x7f00000026c0)='hfs\x00', &(0x7f0000002700)='./bus\x00', 0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a40)={[{@type={'type', 0x3d, "9d1000c1"}}]})

20:29:10 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x3, 0xec}, 0x8)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000480))
accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0))
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x0, 0x40000104]})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10)

20:29:10 executing program 7:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xc}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:29:10 executing program 6:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000))
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}})
syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/83, 0x53}], 0x1, 0x0)

[  311.912762] hfs: type requires a 4 character value
[  311.917819] hfs: unable to parse mount options
20:29:10 executing program 6:
r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

20:29:10 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_cmd={0x18}})

20:29:10 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendfile(r1, r1, &(0x7f0000000040), 0x1)

20:29:10 executing program 7:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xc}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

[  311.954386] FAT-fs (loop4): Directory bread(block 128) failed
[  311.992797] FAT-fs (loop4): Directory bread(block 129) failed
20:29:10 executing program 5:
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1)
semop(r0, &(0x7f000001a000)=[{}, {}], 0x2)
semtimedop(r0, &(0x7f0000036ff4)=[{}, {}], 0x2, &(0x7f0000036ff0)={0x77359400})
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000180)=""/97)

20:29:10 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48)

[  312.002638] FAT-fs (loop4): Directory bread(block 130) failed
[  312.009424] FAT-fs (loop4): Directory bread(block 131) failed
[  312.016819] FAT-fs (loop4): Directory bread(block 132) failed
[  312.023760] FAT-fs (loop4): Directory bread(block 133) failed
[  312.030487] FAT-fs (loop4): Directory bread(block 134) failed
[  312.036822] FAT-fs (loop4): Directory bread(block 135) failed
[  312.043211] FAT-fs (loop4): Directory bread(block 136) failed
[  312.049237] FAT-fs (loop4): Directory bread(block 137) failed
[  312.094058] attempt to access beyond end of device
[  312.099065] loop4: rw=2049, want=310, limit=128
[  312.103786] buffer_io_error: 31 callbacks suppressed
[  312.103799] Buffer I/O error on dev loop4, logical block 309, lost async page write
[  312.116847] attempt to access beyond end of device
[  312.121872] loop4: rw=2049, want=311, limit=128
[  312.126571] Buffer I/O error on dev loop4, logical block 310, lost async page write
[  312.134526] attempt to access beyond end of device
[  312.139519] loop4: rw=2049, want=312, limit=128
[  312.144245] Buffer I/O error on dev loop4, logical block 311, lost async page write
[  312.159790] attempt to access beyond end of device
[  312.164821] loop4: rw=2049, want=313, limit=128
[  312.169571] Buffer I/O error on dev loop4, logical block 312, lost async page write
[  312.178652] attempt to access beyond end of device
[  312.183643] loop4: rw=2049, want=326, limit=128
[  312.188368] Buffer I/O error on dev loop4, logical block 325, lost async page write
[  312.216882] attempt to access beyond end of device
[  312.221979] loop4: rw=2049, want=327, limit=128
[  312.226704] Buffer I/O error on dev loop4, logical block 326, lost async page write
[  312.236120] attempt to access beyond end of device
[  312.241155] loop4: rw=2049, want=328, limit=128
[  312.245867] Buffer I/O error on dev loop4, logical block 327, lost async page write
[  312.260108] attempt to access beyond end of device
20:29:10 executing program 6:
r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

20:29:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x77359400}, 0x8)
getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  312.265219] loop4: rw=2049, want=329, limit=128
[  312.269939] Buffer I/O error on dev loop4, logical block 328, lost async page write
[  312.282744] attempt to access beyond end of device
[  312.287749] loop4: rw=2049, want=2153, limit=128
[  312.305741] attempt to access beyond end of device
[  312.310782] loop4: rw=2049, want=2154, limit=128
[  312.320433] attempt to access beyond end of device
[  312.325448] loop4: rw=2049, want=2154, limit=128
20:29:11 executing program 0:
r0 = memfd_create(&(0x7f00000001c0)="00000600000000000000", 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380002000000000000000300000000000000000000000000000000000000000000000000040000000000f80000000000000b00000000000000000000000000000000e865ce175af1c16e25a3ce6a3c8329676a3df53a25509ebbaa3ffe848034c3c1a98ae9008248455a221d3c6905396664e6ae5099617de780"], 0xb0)
execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000)

20:29:11 executing program 7:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xc}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:29:11 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendfile(r1, r1, &(0x7f0000000040), 0x1)

20:29:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45)
io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}])

20:29:11 executing program 6:
r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5)
writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='4', 0x1}], 0x1)

20:29:11 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr}], 0x10)
close(r2)
close(r1)

20:29:11 executing program 6:
getgid()
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000600), &(0x7f0000000700)=0x8)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x7, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)

20:29:11 executing program 7:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000140), 0x4)

[  312.969644] FAT-fs (loop4): Directory bread(block 128) failed
[  312.995116] FAT-fs (loop4): Directory bread(block 129) failed
20:29:11 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0xc}})

20:29:11 executing program 0:
set_mempolicy(0x2, &(0x7f0000000000)=0x81, 0x8001)
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000540)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000580))

[  313.015169] FAT-fs (loop4): Directory bread(block 130) failed
[  313.030107] FAT-fs (loop4): Directory bread(block 131) failed
[  313.036223] FAT-fs (loop4): Directory bread(block 132) failed
[  313.042346] FAT-fs (loop4): Directory bread(block 133) failed
[  313.048621] FAT-fs (loop4): Directory bread(block 134) failed
[  313.054626] FAT-fs (loop4): Directory bread(block 135) failed
[  313.060749] FAT-fs (loop4): Directory bread(block 136) failed
[  313.066894] FAT-fs (loop4): Directory bread(block 137) failed
[  313.115812] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  313.115812] The task syz-executor5 (21580) triggered the difference, watch for misbehavior.
[  313.117104] attempt to access beyond end of device
[  313.137635] loop4: rw=2049, want=310, limit=128
[  313.142392] Buffer I/O error on dev loop4, logical block 309, lost async page write
[  313.150309] attempt to access beyond end of device
[  313.155393] loop4: rw=2049, want=311, limit=128
[  313.160111] Buffer I/O error on dev loop4, logical block 310, lost async page write
[  313.169051] attempt to access beyond end of device
[  313.174217] loop4: rw=2049, want=312, limit=128
[  313.179069] attempt to access beyond end of device
[  313.184126] loop4: rw=2049, want=313, limit=128
[  313.189908] attempt to access beyond end of device
[  313.195140] loop4: rw=2049, want=326, limit=128
[  313.199896] attempt to access beyond end of device
[  313.204872] loop4: rw=2049, want=327, limit=128
[  313.209586] attempt to access beyond end of device
[  313.214860] loop4: rw=2049, want=328, limit=128
[  313.219713] attempt to access beyond end of device
[  313.224678] loop4: rw=2049, want=329, limit=128
[  313.230873] attempt to access beyond end of device
[  313.235978] loop4: rw=2049, want=2153, limit=128
20:29:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45)
io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}])

20:29:11 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0xb2, 0x4, 0x7}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c)

[  313.280248] attempt to access beyond end of device
[  313.285318] loop4: rw=2049, want=2154, limit=128
20:29:11 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x3, 0x4, 0x80000000004, 0x8000000007}, 0x2c)
close(r0)

20:29:11 executing program 7:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0))
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x1000000000016)

20:29:11 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007"])
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@nat={'nat\x00', 0x19, 0x6, 0x17b, [0x20000140, 0x0, 0x0, 0x20000170, 0x200004d8], 0x0, &(0x7f0000000100), &(0x7f0000001140)=ANY=[@ANYBLOB="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"]}, 0x1f3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:11 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r1, 0x0, "a431d7", "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"}}, 0x110)

[  313.358720] FAT-fs (loop0): Directory bread(block 2563) failed
[  313.365059] FAT-fs (loop0): Directory bread(block 2564) failed
[  313.371357] FAT-fs (loop0): Directory bread(block 2565) failed
[  313.377613] FAT-fs (loop0): Directory bread(block 2566) failed
[  313.383724] FAT-fs (loop0): Directory bread(block 2567) failed
[  313.389904] FAT-fs (loop0): Directory bread(block 2568) failed
[  313.396547] FAT-fs (loop0): Directory bread(block 2569) failed
[  313.402801] FAT-fs (loop0): Directory bread(block 2570) failed
20:29:11 executing program 0:
r0 = socket$inet6(0xa, 0x40100000003, 0x87)
sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1b)

[  313.408959] FAT-fs (loop0): Directory bread(block 2571) failed
[  313.415087] FAT-fs (loop0): Directory bread(block 2572) failed
20:29:11 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioprio_set$pid(0x1, 0x0, 0x2000)

20:29:11 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000040)=[{}]})

20:29:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x4)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000130007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:29:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x4413fcf12466f4d}}, 0x50)
open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20)
getdents(r1, &(0x7f0000000240)=""/185, 0xb9)
read$FUSE(r0, &(0x7f0000002000), 0x1000)
write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18)

[  313.644539] FAT-fs (loop4): Directory bread(block 128) failed
[  313.670959] FAT-fs (loop4): Directory bread(block 129) failed
[  313.692468] FAT-fs (loop4): Directory bread(block 130) failed
[  313.706203] FAT-fs (loop4): Directory bread(block 131) failed
[  313.719317] FAT-fs (loop4): Directory bread(block 132) failed
[  313.743518] FAT-fs (loop4): Directory bread(block 133) failed
[  313.761926] FAT-fs (loop4): Directory bread(block 134) failed
[  313.787884] FAT-fs (loop4): Directory bread(block 135) failed
[  313.799078] FAT-fs (loop4): Directory bread(block 136) failed
[  313.829835] FAT-fs (loop4): Directory bread(block 137) failed
20:29:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:29:12 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r2, r1, 0xa, 0x2}, 0x10)

20:29:12 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000040)=[{}]})

20:29:12 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10)
close(r1)

20:29:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r3 = socket$kcm(0x29, 0x200000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000004640)={&(0x7f0000000040), 0xc, &(0x7f0000004600)={&(0x7f0000003d00)={0x190, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x174, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{}, {}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x190}}, 0x0)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x20044000)
recvmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f00000005c0)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0xf1}}], 0x70, 0x0, &(0x7f0000000200)={0x77359400})
sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f00000002c0)=@nl, 0x80, &(0x7f0000000500)}}], 0x1, 0x0)

[  314.065973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  314.082673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  314.087100] attempt to access beyond end of device
[  314.096245] loop4: rw=2049, want=310, limit=128
[  314.105310] attempt to access beyond end of device
[  314.110539] loop4: rw=2049, want=311, limit=128
[  314.115763] attempt to access beyond end of device
[  314.120811] loop4: rw=2049, want=312, limit=128
[  314.127621] attempt to access beyond end of device
[  314.132752] loop4: rw=2049, want=313, limit=128
[  314.154246] attempt to access beyond end of device
[  314.159363] loop4: rw=2049, want=326, limit=128
[  314.166448] attempt to access beyond end of device
[  314.171636] loop4: rw=2049, want=327, limit=128
[  314.176767] attempt to access beyond end of device
[  314.181807] loop4: rw=2049, want=328, limit=128
[  314.187068] attempt to access beyond end of device
[  314.192283] loop4: rw=2049, want=329, limit=128
[  314.198765] attempt to access beyond end of device
[  314.203797] loop4: rw=2049, want=2153, limit=128
[  314.238398] attempt to access beyond end of device
[  314.243601] loop4: rw=2049, want=2154, limit=128
20:29:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0)
io_setup(0x7, &(0x7f0000000000)=<r1=>0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45)
io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="80", 0x1}])

20:29:12 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10)
syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xfc], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x20101, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

20:29:12 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000040)=[{}]})

20:29:12 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

20:29:12 executing program 0:
perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000042dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

20:29:12 executing program 6:
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r0 = socket(0x11, 0x2, 0x0)
bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x2, 0x4)
syz_emit_ethernet(0xbf, &(0x7f00000004c0)={@dev, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "7b2693", 0x89, 0x0, 0x0, @local, @empty, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a21535", 0x0, "722ca7"}, "4919578f45620f7df751c0c252781aeb131432158b0965e7557a938c12c6d5036ea84b463aeb4302c519fe078d63b8839528ade6c8924179952b12685103e3b2294faa4e733000330a1c4c99eeca6a707e69529e69f55f488457f33c5e79e9d5b3722460525e6d03d3415543a6bdc91b70933388da49b2a234"}}}}}}, &(0x7f0000000080))

20:29:12 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
connect$netlink(r0, &(0x7f0000000000)=@proc, 0x1)

20:29:12 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000040)=[{}]})

20:29:12 executing program 7:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0))
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x1000000000016)

20:29:12 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000004f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x100000000, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x60000000, 0x0, 0x0, 0x100000001})
mq_timedreceive(r1, &(0x7f0000000080)=""/30, 0x1e, 0x20000080, &(0x7f0000000100))

[  314.569185] FAT-fs (loop4): Directory bread(block 128) failed
[  314.575578] FAT-fs (loop4): Directory bread(block 129) failed
[  314.581585] FAT-fs (loop4): Directory bread(block 130) failed
[  314.587793] FAT-fs (loop4): Directory bread(block 131) failed
[  314.593860] FAT-fs (loop4): Directory bread(block 132) failed
[  314.599983] FAT-fs (loop4): Directory bread(block 133) failed
[  314.606070] FAT-fs (loop4): Directory bread(block 134) failed
[  314.612077] FAT-fs (loop4): Directory bread(block 135) failed
[  314.618190] FAT-fs (loop4): Directory bread(block 136) failed
[  314.624208] FAT-fs (loop4): Directory bread(block 137) failed
[  314.759876] attempt to access beyond end of device
[  314.764919] loop4: rw=2049, want=310, limit=128
[  314.769845] attempt to access beyond end of device
[  314.774966] loop4: rw=2049, want=311, limit=128
[  314.779990] attempt to access beyond end of device
[  314.784976] loop4: rw=2049, want=312, limit=128
[  314.789926] attempt to access beyond end of device
[  314.794931] loop4: rw=2049, want=313, limit=128
[  314.799756] attempt to access beyond end of device
[  314.804748] loop4: rw=2049, want=326, limit=128
[  314.809735] attempt to access beyond end of device
[  314.814721] loop4: rw=2049, want=327, limit=128
[  314.819713] attempt to access beyond end of device
[  314.824711] loop4: rw=2049, want=328, limit=128
[  314.829651] attempt to access beyond end of device
[  314.834646] loop4: rw=2049, want=329, limit=128
[  314.842911] attempt to access beyond end of device
[  314.847929] loop4: rw=2049, want=2153, limit=128
[  314.875544] attempt to access beyond end of device
[  314.880577] loop4: rw=2049, want=2154, limit=128
20:29:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x27, 0x101, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, @u32}]}, 0x1c}}, 0x0)

20:29:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

20:29:13 executing program 6:
setrlimit(0x7, &(0x7f0000000040))
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680))

20:29:13 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"8420e139ff841b4126b7f193d36af535"}}}}, 0x90)

20:29:13 executing program 5:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0)
readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1)
io_setup(0x800000000cb, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)}])

20:29:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2000002d, 0x443}, 0x14}}, 0x0)

20:29:13 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)

20:29:13 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xa35)
read(r0, &(0x7f00003fefff)=""/1, 0x1)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1)
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000))
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080))
r4 = dup2(r2, r3)
fcntl$setown(r4, 0x8, r1)
tkill(r1, 0x16)

20:29:13 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r2})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040))

20:29:13 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280))

20:29:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

20:29:13 executing program 1:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./:ile0\x00', 0x0)

20:29:13 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = dup(r0)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r1})

20:29:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x80000000000a)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0)

[  315.243724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'.
20:29:13 executing program 7:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0))
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x1000000000016)

20:29:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

20:29:13 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = eventfd(0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
sendfile(r1, r2, &(0x7f00000000c0), 0xffffffff)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
sendfile(r1, r2, &(0x7f0000000000), 0x1000000008)
tkill(r0, 0x15)

20:29:13 executing program 1:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./:ile0\x00', 0x0)

20:29:13 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x88}}, 0x0)

20:29:13 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x22f, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev, {[@timestamp={0x8, 0xc, 0x0, 0x0, 0x0, [{[@dev]}]}]}}}}}}}, &(0x7f0000000000))

20:29:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x30, &(0x7f0000000080)=ANY=[], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
write(r3, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
socket$packet(0x11, 0x3, 0x300)
close(r0)
close(r1)

20:29:13 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c)
listen(r1, 0xfff)
r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x2da)
close(r2)

20:29:13 executing program 1:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./:ile0\x00', 0x0)

20:29:14 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)="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")
flock(r0, 0x8)

20:29:14 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff87}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48)

20:29:14 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x5c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:14 executing program 1:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./:ile0\x00', 0x0)

20:29:14 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280))

20:29:14 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = eventfd(0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
sendfile(r1, r2, &(0x7f00000000c0), 0xffffffff)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
sendfile(r1, r2, &(0x7f0000000000), 0x1000000008)
tkill(r0, 0x15)

20:29:14 executing program 7:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0))
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x1000000000016)

20:29:14 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000000)="025cc83d6d345e8f762070")
ioctl$TCSETS(r1, 0x5412, &(0x7f00000000c0)={0x16})

20:29:14 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
unshare(0x4000000)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
setns(r1, 0x0)

20:29:14 executing program 2:
r0 = socket$kcm(0xa, 0x6, 0x0)
bpf$MAP_CREATE(0x6, &(0x7f0000000000), 0xe)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x36)

20:29:14 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9)
mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8))

20:29:14 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000200bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400600000000006506000001ed00003f140000000000006f460000000000006b0a00fe000000008500000007000000b7070000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

20:29:15 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000500)={[{@quota_quantum={'quota_quantum', 0x3d, 0x80000001}}]})

20:29:15 executing program 4:
capset(&(0x7f0000b3e000)={0x19980330}, &(0x7f0000f21fe8))
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000824000)=0x8, 0x4)

20:29:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)

20:29:15 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
clone(0x0, &(0x7f00000024c0), &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0))
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
wait4(r2, &(0x7f0000000280), 0x0, &(0x7f00000002c0))

20:29:15 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x800, 0x20100)
r1 = dup(r0)
r2 = memfd_create(&(0x7f0000000540)='trusted.syz\x00', 0x2)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100))
write$cgroup_int(r3, &(0x7f0000000300)=0xa2, 0x12)
r4 = memfd_create(&(0x7f00000001c0)="74086e750000000000000000008c00", 0x0)
pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00')
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140))
sendfile(r3, r3, &(0x7f0000000000), 0x2000006)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0xffffffffffff7810, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000240)=0x20)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000380))

20:29:15 executing program 2:
mkdir(&(0x7f00000000c0)='./file0/\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x32}, 0x2c)
mount(&(0x7f0000000700)='./file0/\x00', &(0x7f0000000180)='./file0/\x00', &(0x7f00000001c0)="70726f63009b6a2c823f92ab1d5b2f50155c21b4ddadd9060079216becc16f47afb3aec6b4d757eac0a6344afd1ce9d561075c31c4142aa5bf61c3ae458640c0ec61baa4c00d684cd95e0be68153c4adca5e45190c3a26a50c41d793a4a983e9", 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0/', 0x0)

[  316.853054] gfs2: quota_quantum mount option requires a positive numeric argument
[  316.860782] gfs2: can't parse mount arguments
20:29:15 executing program 6:
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, &(0x7f0000000100), r1, &(0x7f00000002c0), 0x1000, 0x0)

[  316.934464] gfs2: quota_quantum mount option requires a positive numeric argument
[  316.942258] gfs2: can't parse mount arguments
20:29:15 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000040)}, 0x20)
bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2af)

20:29:15 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00')
readv(r0, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/111, 0x6f}], 0x1)
pread64(r0, &(0x7f0000000000), 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/107, 0x6b)

20:29:15 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000))
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)
close(r2)

20:29:15 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x48, 0x6c}, [@ldst={0x7, 0x1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xfdbb, &(0x7f000000cf3d)=""/195}, 0x48)

20:29:15 executing program 3:
r0 = getpid()
mkdir(&(0x7f0000000340)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000000c0)='./control/file0\x00')
sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x8001)
creat(&(0x7f0000000300)='./control/file2\x00', 0x0)
lsetxattr(&(0x7f0000000140)='./control/file2\x00', &(0x7f0000000380)=ANY=[], &(0x7f00000004c0)="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", 0xfffffffffffffc9b, 0x0)
close(r1)

20:29:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280))

20:29:15 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = eventfd(0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
sendfile(r1, r2, &(0x7f00000000c0), 0xffffffff)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
sendfile(r1, r2, &(0x7f0000000000), 0x1000000008)
tkill(r0, 0x15)

20:29:15 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

20:29:15 executing program 6:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000400)=')', 0x1}], 0x1)

20:29:15 executing program 4:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80)
r1 = socket(0x1e, 0x2, 0x0)
bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r2, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070")
r3 = socket(0x1e, 0x5, 0x0)
sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0)

20:29:15 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x80045301, &(0x7f00000002c0))

20:29:15 executing program 6:
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)
recvmmsg(r0, &(0x7f0000000180), 0x1df, 0x0, &(0x7f0000000100)={0x77359400})
sendto$inet(r0, &(0x7f0000000640)="b6", 0x1, 0x8001, &(0x7f0000000540)={0x2, 0x0, @multicast2}, 0x10)

20:29:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070")
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r1, 0xff, 0x1, &(0x7f0000000040)="18", 0x1)

20:29:15 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00004da000), 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc)={0x0, 0x0, 0xed349a51f320a8a3}, 0x4)

20:29:15 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

20:29:16 executing program 6:
r0 = memfd_create(&(0x7f0000000080)='dev ', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8})

20:29:16 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x11, &(0x7f0000000000), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f20d86635080000000f22d866b98b0200000f3266b9aa09000066b80100000066ba000000000f300f00d80f01cb660f38df5f86ba2100b88f0aefb80d008ee8f364360f07360f01cb", 0x49}], 0x1, 0x0, &(0x7f0000000200), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b")
lseek(r0, 0x0, 0x3)

[  317.687083] tls_set_device_offload_rx: netdev lo with no TLS offload
20:29:16 executing program 2:
r0 = memfd_create(&(0x7f0000000280)="02000000000000000000400018fe45620000", 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000001c0)="6d6797dad6034d6745780a73949e6b1c4ef070fe")
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"})
write$sndseq(r0, &(0x7f0000000080), 0xffffff17)

20:29:16 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

20:29:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0x83, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

20:29:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280))

20:29:16 executing program 6:
rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r1, 0xa, 0x12)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580))
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0})
recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0)
dup2(r1, r2)
tkill(r0, 0x15)

20:29:16 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x11, &(0x7f0000000000), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f20d86635080000000f22d866b98b0200000f3266b9aa09000066b80100000066ba000000000f300f00d80f01cb660f38df5f86ba2100b88f0aefb80d008ee8f364360f07360f01cb", 0x49}], 0x1, 0x0, &(0x7f0000000200), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:16 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = eventfd(0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
sendfile(r1, r2, &(0x7f00000000c0), 0xffffffff)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
sendfile(r1, r2, &(0x7f0000000000), 0x1000000008)
tkill(r0, 0x15)

20:29:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b")
lseek(r0, 0x0, 0x3)

20:29:16 executing program 1:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

20:29:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b")
lseek(r0, 0x0, 0x3)

20:29:16 executing program 3:
r0 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
io_setup(0x89, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000356ff0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="d5f78b8e7ae8f876edea6d39ed45c302f5dcec1b794a48163f2039fa83f1fef20530cea2a41c4bb0", 0x28}])

20:29:16 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x11, &(0x7f0000000000), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f20d86635080000000f22d866b98b0200000f3266b9aa09000066b80100000066ba000000000f300f00d80f01cb660f38df5f86ba2100b88f0aefb80d008ee8f364360f07360f01cb", 0x49}], 0x1, 0x0, &(0x7f0000000200), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9)
sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff)

20:29:16 executing program 1:
mkdir(&(0x7f0000ed6000)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='ramfs\x00', 0x0, &(0x7f00006dafff))
r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f000045bff8)='./file0\x00', r0, &(0x7f00000cc000)='./file0\x00')
linkat(r0, &(0x7f000001b000)='./file0\x00', r0, &(0x7f0000017000)='./file1\x00', 0x0)

20:29:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b")
lseek(r0, 0x0, 0x3)

20:29:17 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1})

20:29:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9)
sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff)

20:29:17 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="baf80c66b89298b38c66efbafc0cb80001ef0f4acf0f175dfb0f0f9403000d0faeb3d74e885ce0b86b0c8ee066b9040b000066b82d50000066ba000000000f3066b9ab03000066b8167e000066ba000000000f302e0f01ca", 0x58}], 0x1, 0x11, &(0x7f0000000000), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f20d86635080000000f22d866b98b0200000f3266b9aa09000066b80100000066ba000000000f300f00d80f01cb660f38df5f86ba2100b88f0aefb80d008ee8f364360f07360f01cb", 0x49}], 0x1, 0x0, &(0x7f0000000200), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:17 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000340)="ff0204000000020500000000000000000000000000000000", 0x18)
connect(r1, &(0x7f00000000c0)=@in, 0x80)
sendto$inet6(r1, &(0x7f0000000000), 0xffcb, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)

20:29:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9)
sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff)

20:29:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
creat(&(0x7f0000000180)='./file0/fil..\x00', 0x0)

20:29:17 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80}]}, 0x28}}, 0x0)

20:29:17 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6000000}, 0x1c)

20:29:17 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x0)
sendmmsg(r2, &(0x7f0000001b00)=[{{&(0x7f0000001640)=@hci, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)="32ec300c5df63e3242d635250dede6bfdaa12cdd02db72b0f44ce1362088b949e4", 0x21}], 0x1}}], 0x1, 0x0)

20:29:17 executing program 6:
rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r1, 0xa, 0x12)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580))
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0})
recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0)
dup2(r1, r2)
tkill(r0, 0x15)

20:29:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d34008f762070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv4_getroute={0x1c, 0x1a, 0x701}, 0x1c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

20:29:17 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x2000105082)
r2 = memfd_create(&(0x7f0000000100)="003fcc78ffff2d", 0x0)
pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
fallocate(r1, 0x11, 0x0, 0x100000001)

20:29:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f000000aff4), 0xc, &(0x7f0000001000)={&(0x7f0000014fdc)={0x14, 0x14, 0x535, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

20:29:17 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x4d, 0x0, 0x5}, {}]})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})

20:29:17 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getpid()
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000))
clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))
execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000))
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)})
close(r0)

20:29:17 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9)
sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff)

20:29:17 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000))
ppoll(&(0x7f0000000100)=[{r1, 0xa75f5e1c6fbbafd1}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8)

20:29:17 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)

20:29:17 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
r2 = socket$kcm(0x29, 0x5, 0x0)
sendfile(r2, r1, &(0x7f0000301ff8)=0x3, 0xffffffff)
write$binfmt_aout(r2, &(0x7f00000000c0), 0xfffffdef)

20:29:18 executing program 7:
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
ioctl$fiemap(r0, 0x40086602, &(0x7f0000000340)=ANY=[])
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
dup3(r0, r1, 0x0)
fallocate(r1, 0x1, 0x0, 0x10000102)

20:29:18 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x20201)
fcntl$setstatus(r1, 0x4, 0x2800)
ioctl$TCXONC(r1, 0x540a, 0x0)
write(r1, &(0x7f0000000180)="bf", 0x1)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
close(r0)

20:29:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="480000001400190d09004beafd0d95010a840600000000000000a2b1ffd3242229a9f5f5a47dc2bc56199faef804008900000020982582104f7d7f0000000101ff0000000309ff5b", 0x48}], 0x1)

20:29:18 executing program 1:
mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0)
creat(&(0x7f0000ccb000)='./bus\x00', 0x0)
open(&(0x7f0000043000)='./bus\x00', 0x0, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x801, 0x0)

20:29:18 executing program 3:
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f0000000180)='./control/file0\x00')
open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00')
close(r0)

20:29:18 executing program 7:
r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})

20:29:18 executing program 6:
rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r1, 0xa, 0x12)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580))
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0})
recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0)
dup2(r1, r2)
tkill(r0, 0x15)

20:29:18 executing program 5:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x8200)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xfffffeb3)
fallocate(r0, 0x0, 0x0, 0xffff)

20:29:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x202)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000140)="2b78a0aa2abe1bb4bb333551023460d69bac8bb47d00e78f26ad10bd5a29215d6a11b76192fad173b043efe8895240749a1e9f5b901a2c82759a83c86ab7b9e73e5eadde8844f2b73660ac1ccbf0557b8f2f6bce22d4a47a748237d8f11908fe6b379ec9a9ce31747a64f2be47d2c126d155")
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0))

20:29:18 executing program 7:
r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})

20:29:18 executing program 7:
r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})

20:29:18 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getpid()
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000))
clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))
execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000))
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)})
close(r0)

20:29:18 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000280)={0x18, 0x55, 0x3ef, 0x0, 0x0, {0x7}, [@generic="9f"]}, 0x18}}, 0x0)

20:29:18 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x2, [@dev, @local]}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

20:29:19 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x800010800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000400)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)

20:29:19 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070")
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0xa0)

20:29:19 executing program 7:
r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})

20:29:19 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, r0)
keyctl$set_reqkey_keyring(0x5, 0xfffffffffffffffe)
add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100), &(0x7f0000000280), 0x23e, r1)

[  321.027750] PF_BRIDGE: br_mdb_parse() with unknown ifindex
20:29:19 executing program 3:
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f0000000180)='./control/file0\x00')
open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00')
close(r0)

20:29:19 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x2, [@dev, @local]}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

20:29:19 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x8000000000000007)
close(r1)

20:29:19 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f0000000100))

20:29:19 executing program 6:
rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r1, 0xa, 0x12)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580))
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0})
recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0)
dup2(r1, r2)
tkill(r0, 0x15)

20:29:19 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_setup(0x8001, &(0x7f0000000180)=<r1=>0x0)
syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@resize='resize'}]})
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)}])

20:29:19 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x2, [@dev, @local]}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

20:29:19 executing program 7:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xff, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
sendfile(r2, r1, &(0x7f0000000040), 0x36a44c91)

20:29:19 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish-asm)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/81, 0x51}], 0x2, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

[  321.752775] JFS: Cannot determine volume size
[  321.781141] JFS: Cannot determine volume size
20:29:20 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x2, [@dev, @local]}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

20:29:20 executing program 7:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fefdf77a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000080000006a0a00fe000000008500000027000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000280)="3c2dbcd405e8e96a639a2feea71b", &(0x7f0000000440)=""/215}, 0x28)

20:29:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000000000000b9020061aa4fc00084811f4ce10000001e000000000000000010ecec01e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900))

[  322.008054] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  322.017227] REISERFS (device loop5): using ordered data mode
[  322.023161] reiserfs: using flush barriers
[  322.039257] REISERFS warning (device loop5): journal-1393 journal_init: journal does not fit for area addressed by first of bitmap blocks. It starts at 18 and its size is 1627390649. Block size 4096
[  322.057876] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  322.091350] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  322.100345] REISERFS (device loop5): using ordered data mode
20:29:20 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_setup(0x8001, &(0x7f0000000180)=<r1=>0x0)
syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@resize='resize'}]})
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)}])

20:29:20 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getpid()
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000))
clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))
execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000))
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)})
close(r0)

20:29:20 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x80005, 0x0)
recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)=""/229, 0xe5}}], 0x1, 0x2020, &(0x7f00000010c0)={0x77359400})

20:29:20 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000018ff4), 0xc, &(0x7f0000013ff1)={&(0x7f00000000c0)={0x20, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, [@typed={0x2, 0x0, @pid}]}]}, 0x20}}, 0x0)

[  322.106280] reiserfs: using flush barriers
[  322.112370] REISERFS warning (device loop5): journal-1393 journal_init: journal does not fit for area addressed by first of bitmap blocks. It starts at 18 and its size is 1627390649. Block size 4096
[  322.130864] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space
20:29:20 executing program 3:
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f0000000180)='./control/file0\x00')
open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00')
close(r0)

20:29:20 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00')
fcntl$notify(r0, 0x402, 0x10)
getdents64(r0, &(0x7f0000000340)=""/57, 0x39)

20:29:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000000000000b9020061aa4fc00084811f4ce10000001e000000000000000010ecec01e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900))

[  322.283480] JFS: Cannot determine volume size
20:29:20 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_setup(0x8001, &(0x7f0000000180)=<r1=>0x0)
syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@resize='resize'}]})
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)}])

[  322.438085] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  322.449368] REISERFS (device loop5): using ordered data mode
[  322.455375] reiserfs: using flush barriers
[  322.460372] REISERFS warning (device loop5): journal-1393 journal_init: journal does not fit for area addressed by first of bitmap blocks. It starts at 18 and its size is 1627390649. Block size 4096
[  322.478727] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  322.627402] JFS: Cannot determine volume size
20:29:20 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_setup(0x8001, &(0x7f0000000180)=<r1=>0x0)
syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000480)={[{@resize='resize'}]})
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000001c0)}])

20:29:20 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00')
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x90c0}, {r2}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8)

20:29:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettfilter={0x23, 0x2e, 0x401}, 0x24}}, 0x0)

20:29:20 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(0x0, &(0x7f00000002c0))

20:29:20 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000000000000b9020061aa4fc00084811f4ce10000001e000000000000000010ecec01e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900))

20:29:20 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b805000000b90d0000000f01c10f01d12e0f01cfb826cb45ab0f23c80f21f8350800c0000f23f8b8010000000f01c1b9800000c00f3235002000000f30debd350000003e0f01c9b9140200000f32", 0x5c}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060"}], 0xaaaaaaaaaaaa84c, 0x0, &(0x7f0000000140), 0x10000000000000c5)
rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080)={0x77359400}, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

20:29:21 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0)

20:29:21 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(0x0, &(0x7f00000002c0))

20:29:21 executing program 7:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f00000000c0), 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040), &(0x7f0000000340), 0x0)

[  322.784990] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  322.804636] REISERFS (device loop5): using ordered data mode
[  322.810542] reiserfs: using flush barriers
[  322.815647] REISERFS warning (device loop5): journal-1393 journal_init: journal does not fit for area addressed by first of bitmap blocks. It starts at 18 and its size is 1627390649. Block size 4096
[  322.834465] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  322.892724] JFS: Cannot determine volume size
20:29:21 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
getpid()
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000))
clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0))
execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000))
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)})
close(r0)

20:29:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000000000000b9020061aa4fc00084811f4ce10000001e000000000000000010ecec01e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900))

20:29:21 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x1000000002, 0x0)
r2 = socket$unix(0x1, 0x10000000002, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x5411, &(0x7f00000000c0))

[  323.299597] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  323.308660] REISERFS (device loop5): using ordered data mode
[  323.314639] reiserfs: using flush barriers
[  323.320596] REISERFS warning (device loop5): journal-1393 journal_init: journal does not fit for area addressed by first of bitmap blocks. It starts at 18 and its size is 1627390649. Block size 4096
[  323.339597] REISERFS warning (device loop5): sh-2022 reiserfs_fill_super: unable to initialize journal space
20:29:21 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x1c}]}]}, 0x28}}, 0x0)

20:29:21 executing program 3:
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f0000000180)='./control/file0\x00')
open$dir(&(0x7f00000000c0)='./control/file1\x00', 0xf0, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./control/file0\x00')
close(r0)

20:29:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00')
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.evm\x00', &(0x7f00000000c0)='security\\louser^:bdev)em1mime_type\'-/proc\x00', 0x13e, 0x0)
unlink(&(0x7f0000000240)='./file0\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

20:29:21 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(0x0, &(0x7f00000002c0))

20:29:21 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400)
ppoll(&(0x7f000026c000)=[{r1}], 0x1, &(0x7f000097d000)={0x77359400}, &(0x7f000016a000), 0x8)
ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f0000000080), &(0x7f00000000c0), 0x8)

20:29:21 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}})

20:29:21 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(0x0, &(0x7f00000002c0))

20:29:21 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0xc8d, &(0x7f0000000080))
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
fstatfs(r1, &(0x7f00000002c0)=""/4096)

20:29:21 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c)

20:29:21 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x0, [{}, {r2}, {r1}, {r1}]})

20:29:22 executing program 1:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x10004)

20:29:22 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
keyctl$chown(0xb, r1, r2, 0x0)

20:29:22 executing program 7:
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback}}, 0xe8)
connect$inet6(r0, &(0x7f00000000c0), 0x18)

20:29:22 executing program 7:
r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000080)={{0x80}, 'port1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{}, 'port0\x00'})

20:29:22 executing program 0:
socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000640)={<r0=>0x0, 0x0})
listen(r0, 0x0)

20:29:22 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018aebd, 0x0)

20:29:22 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x19, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c)

20:29:22 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000002c0)=0x62e0, 0x4)

20:29:22 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x13, &(0x7f0000000080), &(0x7f0000000140)=0x1)

20:29:22 executing program 4:
syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200000000000000b90200000001000084811f4ce10000001e000000000000000010ec0302e5fb005265497345723346731cc0277c217903b41616b3ef", 0x49, 0x10000}], 0x0, &(0x7f0000013900))

20:29:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4068aea3, &(0x7f00000001c0))

20:29:22 executing program 6:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = epoll_create(0x20040000000401)
fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '\x00'})

20:29:22 executing program 2:
r0 = socket$inet6(0xa, 0x8000000000000802, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x3, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000000), 0xfe}, 0x8000)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4)

20:29:23 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000009, &(0x7f0000000040)=0x8001, 0x4)

20:29:23 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)

20:29:23 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x1000000000010, 0x803, 0x0)
sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x4000000000001df, 0xa, &(0x7f0000003700)={0x77359400})

20:29:23 executing program 6:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x179}}, 0x0)

20:29:23 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f00000002c0))
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000440)=""/186, 0x5f5)
getdents64(r0, &(0x7f00000001c0)=""/57, 0xffffffffffffffdd)

[  324.825246] REISERFS warning (device loop4): sh-2012 read_super_block: found unknown format "239" of reiserfs with non-standard magic
[  324.837664] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4
20:29:23 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
perf_event_open$cgroup(&(0x7f0000000440)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffff91c, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  324.865226] REISERFS warning (device loop4): sh-2012 read_super_block: found unknown format "239" of reiserfs with non-standard magic
[  324.877754] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4
20:29:23 executing program 7:
r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000080)={{0x80}, 'port1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{}, 'port0\x00'})

20:29:23 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
ioctl$fiemap(r1, 0x40086602, &(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[]])
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
fstatfs(r2, &(0x7f00000002c0)=""/4096)

20:29:23 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
waitid(0x1, r2, &(0x7f0000000000), 0x1000008, &(0x7f0000000180))

20:29:23 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000009, &(0x7f0000000040)=0x8001, 0x4)

20:29:23 executing program 6:
r0 = memfd_create(&(0x7f0000000080)="6d81351e39cfc228a4c67200", 0x0)
fallocate(r0, 0x0, 0x0, 0x6)
fallocate(r0, 0x1, 0x0, 0x20f2)
lseek(r0, 0x0, 0x4)

20:29:23 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x80004517, &(0x7f00000000c0))

20:29:23 executing program 0:
r0 = gettid()
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="8907040000", 0x5)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
tkill(r0, 0x100000000000014)

20:29:23 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x100000003)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
keyctl$reject(0xc, 0x0, 0xfffffffffffffff5, 0x4000000000006, 0x0)

20:29:23 executing program 6:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)="6d617000007e36f508d267ab0c7afe9f024e551d65d1e42d5eeba686dfc9fc8c5d0183420b678fa50400"}, 0x48)

20:29:23 executing program 1:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000b89fe4)=@req3, 0x1c)
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)

20:29:23 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000009, &(0x7f0000000040)=0x8001, 0x4)

20:29:23 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
waitid(0x1, r2, &(0x7f0000000000), 0x1000008, &(0x7f0000000180))

20:29:23 executing program 2:
r0 = memfd_create(&(0x7f0000000240)='\x00\x00\x00', 0x4)
ftruncate(r0, 0x1000000)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

20:29:23 executing program 5:
r0 = eventfd2(0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
read$eventfd(r0, &(0x7f0000354000), 0x8)
write$eventfd(r0, &(0x7f0000951ff8)=0x3ff, 0x8)

20:29:23 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000009, &(0x7f0000000040)=0x8001, 0x4)

20:29:23 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
waitid(0x1, r2, &(0x7f0000000000), 0x1000008, &(0x7f0000000180))

20:29:24 executing program 7:
r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000080)={{0x80}, 'port1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{}, 'port0\x00'})

20:29:24 executing program 6:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
close(r0)
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

20:29:24 executing program 1:
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000))
mq_timedreceive(r0, &(0x7f0000000080)=""/30, 0x1e, 0x20000080, &(0x7f0000000100))

20:29:24 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$kcm(0x2, 0x6, 0x0)
getsockopt$bt_hci(r1, 0x10d, 0xc, &(0x7f0000000200)=""/86, &(0x7f00000001c0)=0x56)

20:29:24 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040), 0x0)
r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0)
sendmsg$rds(r2, &(0x7f0000001980)={&(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000680)=""/80, 0x50}, {&(0x7f0000001880)=""/71, 0x47}], 0x2}, 0x0)

20:29:24 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x0, 0x0)
ptrace(0x4207, r2)
waitid(0x1, r2, &(0x7f0000000000), 0x1000008, &(0x7f0000000180))

20:29:24 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x0, &(0x7f0000000140)})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$UFFDIO_COPY(r0, 0x4008556c, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, 0x2000})

20:29:24 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000))
r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
read(r1, &(0x7f0000000280)=""/105, 0x69)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/129, 0x81}], 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x15)

20:29:24 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="025c883d6d34528f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x0)

20:29:24 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:24 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000005, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="c7442400e9000000c744240200000100c7442406000000000f011c24450f088f09b895f665410f3248b8b8789b86000000000f23d00f21f835100000000f23f826420f080f20d835200000000f22d866430f50ed650fc718c421c812f8", 0x5d}], 0x1, 0x0, &(0x7f0000000080), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000280)="263ef30f524d02baf80c66b8c6b3c88b66efbafc0cb8ce5def3665dec9f4260f01ca66b9800000c00f326635000800000f306665670f1f00670f017cec35f40fb39adc00", 0x44}], 0x1, 0x0, &(0x7f0000000340), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:29:24 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000300))
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, 0xffffffffffffff9c})

20:29:24 executing program 6:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0)

20:29:25 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="025c883d6d34528f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x0)

20:29:25 executing program 6:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x537, 0x5, 0x0, 0x80000001})
ioctl(r0, 0x2285, &(0x7f0000007000)='S')

20:29:25 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000004400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000002380), 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6daf, 0x0, 0x0, 0xffffff6b)
recvmmsg(r1, &(0x7f0000004180)=[{{&(0x7f0000003f40)=@generic, 0x80, &(0x7f0000004100)=[{&(0x7f0000004080)=""/73, 0x49}], 0x1, &(0x7f0000004140)=""/11, 0xb}}], 0x1, 0x0, &(0x7f00000042c0)={0x0, 0x989680})

20:29:25 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="025c883d6d34528f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x0)

20:29:25 executing program 7:
r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000080)={{0x80}, 'port1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{}, 'port0\x00'})

20:29:25 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
unshare(0x40600)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14)

20:29:25 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:25 executing program 6:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:25 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x6)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0)
sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0)
close(r1)
close(r2)

20:29:25 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:26 executing program 3:
r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20005)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"})
write$binfmt_aout(r2, &(0x7f0000000080)={{0x23}}, 0x20)

20:29:26 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="025c883d6d34528f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x0)

20:29:26 executing program 6:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="39000000110009e369001b00810800000700fd3f16000000450001070000001419001a000400230007000f000200000400000083a8a5000200", 0x39}], 0x1)

20:29:26 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:26 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:26 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in6=@remote}, [@replay_thresh={0x8}]}, 0x48}}, 0x0)

20:29:26 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x0)

20:29:26 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0)

20:29:26 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
modify_ldt$write2(0x11, &(0x7f0000000080)={0x1000}, 0x10)
clone(0x40000000, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340))

[  328.632876] IPVS: ftp: loaded support on port[0] = 21
20:29:27 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:27 executing program 6:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:27 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f000033cff0)={&(0x7f00000000c0)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff, 0x3, 0xff}, [@RTA_FLOW={0x8, 0xb, 0xbc}, @RTA_DST={0x8, 0x1, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4007}, 0x4000000)

20:29:27 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
modify_ldt$write2(0x11, &(0x7f0000000080)={0x1000}, 0x10)
clone(0x40000000, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340))

20:29:27 executing program 1:
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = dup(r2)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_SET_OWNER(r3, 0xaf02, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r1)

20:29:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0)

20:29:27 executing program 2:
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10000, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

20:29:27 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x100, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x1, 0x0, "e4e69e173951f8d6032d82efe36ac970b43d0366c13ad5b31b8379a058c2bdaa456364b258c612c946a8c41fcc6aabfb6f858e89470f966ea60a050000005e8000cea23baaeb2875f6ffd6b0e8210eca"}, 0xd8)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000240)={'bcsh0\x00'})
connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x6, @mcast2, 0x7}}}, 0xf)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @dev}, &(0x7f0000000300)=0xc)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x14)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000280)={0x4, 0x2, 0xfffffffffffff1fb, 0x0, 0x400})
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)

20:29:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0)

20:29:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x4008240b, 0xffffffffffffffff)

20:29:27 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
modify_ldt$write2(0x11, &(0x7f0000000080)={0x1000}, 0x10)
clone(0x40000000, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340))

20:29:27 executing program 7:
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f0000000880)={&(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0)
kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0)

20:29:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x6611, 0x0)

20:29:27 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
prctl$setptracer(0x59616d61, r0)
prctl$setptracer(0x59616d61, r0)

20:29:27 executing program 7:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001380)=""/176, 0xb0}], 0x2, &(0x7f00000014c0)=""/136, 0x88}, 0x0)
recvmsg(r0, &(0x7f0000003040)={&(0x7f00000019c0)=@un=@abs, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/236, 0xec}, {&(0x7f0000002c00)=""/197, 0xc5}, {&(0x7f0000002d00)=""/137, 0x89}, {&(0x7f0000002dc0)=""/60, 0x3c}, {&(0x7f0000002e40)=""/158, 0x9e}], 0x6, &(0x7f0000002fc0)=""/77, 0x4d}, 0x0)

20:29:27 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0xffffffff00000000}, 0x2b8, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

20:29:27 executing program 0:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
modify_ldt$write2(0x11, &(0x7f0000000080)={0x1000}, 0x10)
clone(0x40000000, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340))

20:29:27 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00')
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

20:29:27 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x5c, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x30, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @dev}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @dev}]}, 0x5c}}, 0x0)

20:29:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/arp\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000700)="6f6f6d5f61646a00000026e7080900000000")
sendfile(r1, r0, &(0x7f0000000040)=0x9f, 0x79fffff7ffffff)

[  329.623908] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  329.652955] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  329.670658] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  329.693509] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  329.706705] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  329.714486] netlink: 'syz-executor7': attribute type 29 has an invalid length.
[  329.722563] netlink: 'syz-executor7': attribute type 29 has an invalid length.
20:29:28 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x2, 0xffffffffffffffff]})

20:29:28 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-fixed-time)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="f2ec0638d7899e891dcd824fc9e4e54c", 0x10}], 0x1, &(0x7f0000000240)}, 0x0)
recvmmsg(r2, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007a80)=""/57, 0x39}, {&(0x7f0000007ac0)=""/222, 0x20007b9e}], 0x2, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f0000000040))

20:29:28 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="41f9"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:28 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1}, "00000080000001000000007000"})

20:29:28 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b287bf4042d1", 0x4c}], 0x1}, 0x0)

20:29:28 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001340)={r0, &(0x7f0000000240), &(0x7f0000000340), 0x3}, 0x20)

20:29:28 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000000)="1c", 0x1)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
write(r2, &(0x7f0000000100)="14", 0x1)

20:29:28 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffc}, 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x40000000002, 0x3, 0x2)
dup2(r1, r0)

20:29:28 executing program 6:
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil)

20:29:28 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004501fec3000d000000299078ac14ffbbe000000100000009015119f9167fdf5f0000089078"], 0x0)

20:29:28 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x0, 0x7f, 0x0, 0x37, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000000)=0xb0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0x0, 0x0, [@typed={0x0, 0xfffffffffffff000, @fd}]}]}, 0x24c}}, 0x0)

[  330.052901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'.
20:29:28 executing program 4:
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000))
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x9)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000000c0)='./control/file0\x00')
rmdir(&(0x7f0000000040)='./control\x00')
unlink(&(0x7f0000000140)='./control/file0\x00')
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
close(r0)

20:29:28 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

20:29:28 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8)

20:29:28 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002400)=ANY=[@ANYBLOB="0f11ff"], 0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:28 executing program 6:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(tnepres)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771d39076c63413ac4c3797871c905a3788788903cb54e0b814d561537a2e51405ff0b5bbcb5fe7f41a21b44db2d47be29e7e805a6d3d2a98cea5945db9b758fad872a60d0c8531afe1dbf4d5962f155c68", 0x70}], 0x1, &(0x7f0000000000)}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1, &(0x7f0000001480)=""/66, 0x42}, 0x0)

20:29:28 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35)
read(r0, &(0x7f00003fefff)=""/1, 0x1fc)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140))

20:29:28 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
r1 = gettid()
kcmp(r1, r1, 0x0, r0, 0xffffffffffffffff)

20:29:28 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
pread64(r0, &(0x7f0000000000), 0xeffd, 0x0)

20:29:28 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="000100000008000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_abort='data_err=abort'}]})

20:29:28 executing program 2:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"})

20:29:28 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000)
fcntl$notify(r0, 0x402, 0x4)

[  330.463320] EXT4-fs (loop1): bad geometry: block count 2048 exceeds size of device (2 blocks)
[  330.491024] EXT4-fs (loop1): bad geometry: block count 2048 exceeds size of device (2 blocks)
20:29:29 executing program 3:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = getpid()
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x100000001)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
fcntl$setstatus(r0, 0x408, 0x0)
munmap(&(0x7f0000012000/0x2000)=nil, 0x2000)
dup2(r0, r3)

20:29:29 executing program 6:
r0 = memfd_create(&(0x7f0000000300)="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", 0x2)
write(r0, &(0x7f0000000040)="16", 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
fcntl$addseals(r0, 0x409, 0x8)
fremovexattr(r0, &(0x7f0000000100)=@random={'os2.', 'system.posix_acl_access\x00'})
clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")

20:29:29 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000))
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="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")
r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xc0109207, 0x20000000)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x15)

20:29:29 executing program 1:
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc028660f, &(0x7f0000000780))

20:29:29 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f000050c000/0x2000)=nil, &(0x7f0000000080))
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil)

20:29:29 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0)
close(r1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1)
close(r0)

20:29:29 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x605a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

20:29:29 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x7a)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040))
syz_emit_ethernet(0x256, &(0x7f00000001c0)={@broadcast, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040))

20:29:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc5f40bf00fb020dfdbb9840b00000f32c4c2a598d6c4e272f51d00780000c4c2f91cc2c4c2550c84eb00000000c4c16812f566ba4200b81f7c1097ef", 0x3d}], 0x1, 0x32, &(0x7f0000000180), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="66b9ff0b00000f32b8ee000f00d8f466b9750b000066b87700000066ba000000000f3066b9320600000f32650f09ba4000ec66b9800000c00f326635004000000f303ef2f00fc70f0fc2f7d5", 0x4c}], 0x1, 0x0, &(0x7f0000000200), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:29 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x1000000000005)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)

20:29:29 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x605a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

20:29:29 executing program 2:
syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)={[{@gid={'gid'}}]})
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, &(0x7f00000001c0))

[  331.400365] kvm: emulating exchange as write
20:29:29 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x605a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

20:29:29 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/91)

[  331.643851] ISOFS: Unable to identify CD-ROM format.
[  331.686337] ISOFS: Unable to identify CD-ROM format.
20:29:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@utf8='utf8=1'}]})
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000340)=ANY=[])
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000001c0)='.//ile0\x00', 0x0)

20:29:30 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x605a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[  331.942454] FAT-fs (loop2): bogus number of reserved sectors
[  331.948505] FAT-fs (loop2): Can't find a valid FAT filesystem
20:29:30 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4"})

20:29:30 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8))
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000000)=0x78)

20:29:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x7f)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x1f6)

20:29:30 executing program 7:
r0 = socket$inet6(0xa, 0x1020000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0xe804, 0x1, &(0x7f0000000100)=[{&(0x7f0000000180)="eb3c906d6b660800666174000204010a0200027400f8000000000283224ea4224b5494fab2", 0x25}], 0x0, &(0x7f0000000040)={[{@fat=@showexec='showexec'}]})

20:29:30 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000000)=ANY=[]})
close(r2)
close(r1)

[  332.211973] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
20:29:30 executing program 4:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
read(r0, &(0x7f0000000240)=""/172, 0xac)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)={0x1ff})

20:29:30 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5040d"], 0x83}}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000000ffff"], 0x14}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b)

20:29:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x7f)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x1f6)

20:29:30 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:30 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000a200a0009000100631ee4000c1baba20400ff7e", 0x24}], 0x1}, 0x0)

20:29:30 executing program 3:
madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x0)

20:29:30 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307e8ff1]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x4022, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:30 executing program 5:
r0 = socket(0x10, 0x4000000000000002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x1}})

20:29:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x7f)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x1f6)

20:29:30 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-twofish-3way)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x1067)
recvmsg(r1, &(0x7f0000b24000)={&(0x7f0000f7ffa8)=@alg, 0x49, &(0x7f00000c2fd0)=[{&(0x7f0000f80f9a)=""/102, 0x66}, {&(0x7f0000af7000)=""/4096, 0x1000}], 0x2, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

20:29:30 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:30 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307e8ff1]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x4022, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:30 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
poll(&(0x7f0000001080), 0x0, 0xffff)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0)
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000240)=""/167, 0xa7}], 0x1)
signalfd(r1, &(0x7f0000000000), 0x8)

20:29:30 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00005e6000)=0xffffffffffffff91, 0x4)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f62ff0)=@ipx, 0x10, &(0x7f0000f5d000), 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x61, 0x2041, 0x0)

20:29:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x7f)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x1f6)

20:29:31 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:31 executing program 4:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
read(r0, &(0x7f0000000240)=""/172, 0xac)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)={0x1ff})

20:29:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000000c0)='GPL\x00', 0xe6, 0xfb, &(0x7f0000000300)=""/251}, 0x48)

20:29:31 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307e8ff1]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x4022, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:31 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd}, 0x2c)

20:29:31 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="2115f54773e6ca915eba6663308ba2fba195358549947ce455cfac4a763f1d9e", 0x20}], 0x1, &(0x7f00000068c0)=ANY=[]}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1}, 0x0)

20:29:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20)
close(r0)
close(r1)

20:29:31 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:31 executing program 3:
socket(0x26, 0x0, 0x0)

20:29:31 executing program 2:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
r2 = gettid()
r3 = fcntl$dupfd(r1, 0x0, r1)
recvmmsg(r3, &(0x7f0000000100)=[{{&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x4, &(0x7f0000000040), 0x0, &(0x7f0000001140)=""/161, 0xa1}}], 0x4000183, 0x0, &(0x7f0000001300))
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1004000000016)

20:29:31 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="178e93"], &(0x7f0000000340)=0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:31 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
listen(r0, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2)

20:29:31 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307e8ff1]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x4022, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-ssse3)\x00'}, 0x58)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a68751ab00365a3e8c3511fb2828822550812facbccfea9f43470c0f057f20bd076efb9072510c6593412034c3eec5b134ce798f94266b487de58e2b5ac407a297", 0x41)

20:29:32 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cb53d6d345f8f762070")
r1 = inotify_init()
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x80000002)
inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x20)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

20:29:32 executing program 7:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e)
syz_emit_ethernet(0x14, &(0x7f0000000080)={@dev, @broadcast, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000))

20:29:32 executing program 5:
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200))
r0 = memfd_create(&(0x7f00000000c0)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0)
fsetxattr(r0, &(0x7f0000000040)=@random={'security.', 'keyring\\vmnet1@\x00'}, &(0x7f0000000040), 0x0, 0x0)

[  334.095907] capability: warning: `syz-executor5' uses deprecated v2 capabilities in a way that may be insecure
20:29:32 executing program 4:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
read(r0, &(0x7f0000000240)=""/172, 0xac)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)={0x1ff})

20:29:32 executing program 6:
recvmmsg(0xffffffffffffff9c, &(0x7f0000003b00)=[{{&(0x7f0000000f40)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000003bc0))
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10)
sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x42f, &(0x7f0000001200), 0x322}, 0x8000)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="83", 0x1}], 0x1, &(0x7f00000036c0)}, 0x0)

20:29:32 executing program 7:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e)
syz_emit_ethernet(0x14, &(0x7f0000000080)={@dev, @broadcast, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000))

20:29:32 executing program 5:
r0 = socket$inet6(0xa, 0x802, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0)

20:29:32 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x7d, &(0x7f0000000140), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="4ae30000000000000200000000000000020000004000000000b1ee00000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000008ac000000000000000010000000000000000800000000008000000f01740e56b3000000000000009d01000000000000010001000000000009000000000000000000000000000000000000000000000000000000000000000000000000000088df4f0f2b2d"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:32 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='io.max\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB='8:0\r'], 0x4)

20:29:32 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000000000000000800120000000000000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002002000ac14ffbb000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

20:29:32 executing program 6:
recvmmsg(0xffffffffffffff9c, &(0x7f0000003b00)=[{{&(0x7f0000000f40)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000003bc0))
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10)
sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x42f, &(0x7f0000001200), 0x322}, 0x8000)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="83", 0x1}], 0x1, &(0x7f00000036c0)}, 0x0)

20:29:33 executing program 2:
timer_create(0x8000000000000008, &(0x7f0000044000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000280), &(0x7f00000002c0)}}, &(0x7f00008ec000))
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040))

20:29:33 executing program 7:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e)
syz_emit_ethernet(0x14, &(0x7f0000000080)={@dev, @broadcast, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000))

20:29:33 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="075cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000002000)})
r3 = dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f00000000c0)=[@request_death, @release], 0x0, 0x0, &(0x7f0000000300)})

20:29:33 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}})

20:29:33 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000000000000000800120000000000000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002002000ac14ffbb000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

20:29:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x7d, &(0x7f0000000140), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="4ae30000000000000200000000000000020000004000000000b1ee00000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000008ac000000000000000010000000000000000800000000008000000f01740e56b3000000000000009d01000000000000010001000000000009000000000000000000000000000000000000000000000000000000000000000000000000000088df4f0f2b2d"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:33 executing program 6:
recvmmsg(0xffffffffffffff9c, &(0x7f0000003b00)=[{{&(0x7f0000000f40)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000003bc0))
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10)
sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x42f, &(0x7f0000001200), 0x322}, 0x8000)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="83", 0x1}], 0x1, &(0x7f00000036c0)}, 0x0)

20:29:33 executing program 7:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e)
syz_emit_ethernet(0x14, &(0x7f0000000080)={@dev, @broadcast, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000))

20:29:33 executing program 4:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
read(r0, &(0x7f0000000240)=""/172, 0xac)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)={0x1ff})

20:29:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x100000001}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x100000001}, 0x26)

20:29:33 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000000000000000800120000000000000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002002000ac14ffbb000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

20:29:33 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200))

20:29:33 executing program 6:
recvmmsg(0xffffffffffffff9c, &(0x7f0000003b00)=[{{&(0x7f0000000f40)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/96, 0x60}}], 0x1, 0x0, &(0x7f0000003bc0))
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10)
sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x42f, &(0x7f0000001200), 0x322}, 0x8000)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="83", 0x1}], 0x1, &(0x7f00000036c0)}, 0x0)

20:29:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x7d, &(0x7f0000000140), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="4ae30000000000000200000000000000020000004000000000b1ee00000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000008ac000000000000000010000000000000000800000000008000000f01740e56b3000000000000009d01000000000000010001000000000009000000000000000000000000000000000000000000000000000000000000000000000000000088df4f0f2b2d"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:33 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
shutdown(r0, 0x1)

20:29:33 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000000)=[{0x81, 0x5, 0x0, 0x0, @time, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

20:29:33 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="021800001000000000000000000000000800120000000000000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002002000ac14ffbb000000000000000003000500000000000200003db28dbebb0000000000000000"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

20:29:33 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0))

20:29:33 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000000)=[{0x81, 0x5, 0x0, 0x0, @time, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

20:29:33 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x100000001}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x100000001}, 0x26)

20:29:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x7d, &(0x7f0000000140), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="4ae30000000000000200000000000000020000004000000000b1ee00000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000008ac000000000000000010000000000000000800000000008000000f01740e56b3000000000000009d01000000000000010001000000000009000000000000000000000000000000000000000000000000000000000000000000000000000088df4f0f2b2d"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:33 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000a80)="6e65742f6d6366696c74657200d570a0f9f7cc1ae99a47aa60a8ab291fc86e7561730c7d9aa764749c85e9a2e05346f0a5f68e1c3f8ba06b536b985e206f5b1143b95ba75899a4c3608a683419f280d0425e2038ee1651d1b1210c08e75aee03b514c306f1b5a186b84daf4de7e7137f5297d26e6a833cc1b0114f0915c4a86c0d1895576900738703b75474caa3f8adc10095ef736e9076b591ec3187b9e706f36e1ad96ca2b6ef5a254ede4763017aad3c1728382bd147aa3590432813eb7b34e59544c25c")
r1 = socket$inet(0x2, 0x6, 0x0)
sendfile(r1, r0, &(0x7f0000000000)=0x2f, 0x80000003)

20:29:34 executing program 6:
timer_create(0x0, &(0x7f0000000180)={0x0, 0x38}, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8)

20:29:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x8, &(0x7f00000008c0)=""/233, 0xe9}, 0x0)

20:29:34 executing program 3:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
ptrace(0x4207, r1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ptrace$setregset(0x4205, r1, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)})
setitimer(0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000340))

20:29:34 executing program 2:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fallocate(r1, 0x0, 0x0, 0x5c0d)
sendfile(r0, r1, 0x0, 0x8000)
write$FUSE_POLL(r1, &(0x7f0000000040)={0x18}, 0x18)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

20:29:34 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
io_setup(0xfe, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0xfff, r0, &(0x7f0000000400)="ee1016341071c4214e477e6f87c27fbcea4ca0ca83b7b6b03b319d3c78d8ab30b70d004d2a16ad2e69f6ddc59bcba0a09ec3094cda9392c37b55f2eb332c59a9805e1c48afabecdfecb79f0361fe4fba891db7f77424b972768989dccd56947c0930e902cceea3f39fabbb2a37f5ca3a2429c923375dc72dbcc86ad55c034369371e7c4bad64995e0415d54b18f976ef48252b29b1115a98ec0ef487bd1a89c42faf6897f40b3e18663ef16deddbafb299f11316383d2c5b4dd11d433a9da6913a29700595a18d512ec7c1dd4b5eb16c2a29df192c75d8f73db52c48a0de225e0b49209acc60c83bb04fd6329f172058a77baa137e4f", 0xf6, 0x1f}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000001680)="9ece6a6bd5a9184c3d50009cd5956c02b0cab4d016967a1916a2767496f3445c1b14ebe9982121ce731dbff941cc2905f43e1bf8274bcf46d431d217a8820573a0edc3ce901e27e6e02cb90e3b717d074a9adf6b24cbc1f46870fe3e9aac298a25bc6be93934547540069b5b2f7d02d94b92352c5d5c5275e248be69d1fdd2e4b33c52d9c703f06b9dc01aeb7c5f5c49356bc275d6c885c78b18e30e4d388964f2bad2b74c0cddf8ac3afd39fa578c77df12", 0xb2, 0x7}])

20:29:34 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000000)=[{0x81, 0x5, 0x0, 0x0, @time, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

20:29:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x100000001}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x100000001}, 0x26)

20:29:34 executing program 6:
r0 = socket$inet6(0xa, 0x100000002, 0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)

20:29:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)})

20:29:34 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000000)=[{0x81, 0x5, 0x0, 0x0, @time, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30)

20:29:34 executing program 0:
r0 = socket(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000"], 0x14}, 0x0)

20:29:34 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x100000001}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x100000001}, 0x26)

20:29:34 executing program 3:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf}, 0xf)
sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r1, r1, 0x0, 0x7fffff29)

20:29:34 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x80, &(0x7f0000000200)={[{@gquota='gquota'}, {@inode32='inode32'}, {@qnoenforce='qnoenforce'}, {@gqnoenforce='gqnoenforce'}]})

20:29:34 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0xa, 0x803, 0x39)
ioctl$sock_bt(r1, 0x8907, &(0x7f0000000000))
sendto$unix(r1, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e)
recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000940)=""/242, 0xf2}, 0x0)

20:29:34 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)})

20:29:34 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x14)

[  336.876237] XFS (loop6): Invalid superblock magic number
[  336.902577] XFS (loop6): Invalid superblock magic number
20:29:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x8, &(0x7f00000008c0)=""/233, 0xe9}, 0x0)

20:29:35 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070")
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0)

[  337.035168] sctp: [Deprecated]: syz-executor0 (pid 23340) Use of int in maxseg socket option.
[  337.035168] Use struct sctp_assoc_value instead
[  337.049518] sctp: [Deprecated]: syz-executor0 (pid 23341) Use of int in maxseg socket option.
[  337.049518] Use struct sctp_assoc_value instead
20:29:35 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = dup2(r0, r0)
sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}}, 0x8000)
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8)

20:29:35 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mlockall(0x0)

20:29:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)})

20:29:35 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2)

20:29:35 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x3a, 0x2}, {}], 0x30)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0))

20:29:35 executing program 7:
r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140), &(0x7f0000000400)='V', 0x1, 0xffffffffffffffff)
keyctl$setperm(0x5, r0, 0x100)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setreuid(0x0, r2)
keyctl$setperm(0x11, r0, 0x0)

20:29:35 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:29:35 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = dup2(r0, r0)
sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}}, 0x8000)
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8)

20:29:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)})

[  337.393564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  337.401657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  337.420158] A link change request failed with some changes committed already. Interface sit0.0 may have been left with an inconsistent configuration, please check.
[  337.447964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  337.460749] A link change request failed with some changes committed already. Interface sit0.0 may have been left with an inconsistent configuration, please check.
20:29:36 executing program 7:
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001c0006000000", 0x24)

20:29:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

20:29:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x48d]})

20:29:36 executing program 4:
r0 = socket$inet6(0xa, 0x80002, 0x88)
recvfrom$inet6(r0, &(0x7f0000ffbf47)=""/185, 0xfffffffffffffda3, 0x0, 0x0, 0xfffffffffffffcf5)
bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x10000000004e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0xe5, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)

20:29:36 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = dup2(r0, r0)
sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}}, 0x8000)
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8)

[  337.924405] netlink: 'syz-executor7': attribute type 28 has an invalid length.
20:29:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x8, &(0x7f00000008c0)=""/233, 0xe9}, 0x0)

20:29:36 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40})
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
close(r0)

20:29:36 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:29:36 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:29:36 executing program 7:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x78)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000280)="b86109a8cd6df70f2f73fceb783e2a509586b1e731af3a0f8e0d5bed7abf5ce0068a334a35be091f2beaa0f665f1b78af3b768f011d4a26f1c0603d45b13c27ac749e00e9eff9554f5451c1b7910ae4e43f8110df2d2a249fcd36c90993fbf2b67c479194e4feb3b07e52d441e42bb3950af5be53956614abe907412ff91a669bcca", 0x82, 0x0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10)
socket$packet(0x11, 0x0, 0x300)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10)
shutdown(r0, 0x1)

20:29:36 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
r2 = dup2(r0, r0)
sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000002900)=ANY=[]], 0x8}}, 0x8000)
fcntl$setstatus(r2, 0x4, 0x2000)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x8)

20:29:36 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x271, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0))

20:29:36 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write(r1, &(0x7f0000000080), 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x1c, 0x28, 0x10000000000005, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="0241"]}]}, 0x1c}}, 0x0)

20:29:36 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x4, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x883e, 0x8}}}}}}, &(0x7f0000000080))

20:29:36 executing program 2:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080), 0x10)

20:29:36 executing program 7:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, &(0x7f0000000340)="e9", 0x1, 0x840, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
sendmsg$rds(r0, &(0x7f00000034c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1, &(0x7f0000003280)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000800), &(0x7f0000000840)}}], 0x58}, 0x0)

[  338.266842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:29:36 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[  338.305936] A link change request failed with some changes committed already. Interface sit0.0 may have been left with an inconsistent configuration, please check.
20:29:36 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000012000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000010000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x5fd, 0x65, &(0x7f0000000a80)="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", &(0x7f0000000280)=""/101}, 0x28)

20:29:36 executing program 5:
write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a)

[  338.530969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  338.542842] A link change request failed with some changes committed already. Interface sit0.0 may have been left with an inconsistent configuration, please check.
20:29:36 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x7)
syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @icmp=@timestamp}}}}, &(0x7f0000ea3000))

20:29:36 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x0)

20:29:37 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x8, &(0x7f00000008c0)=""/233, 0xe9}, 0x0)

20:29:37 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:29:37 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/89, 0x59}], 0x2)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

20:29:37 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
dup3(r1, r0, 0x0)

20:29:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=@deltaction={0x18, 0x30, 0x209, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0)

20:29:37 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000040)={0x7b})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi}]})

20:29:37 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000))
r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
unshare(0x40600)
r1 = gettid()
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000fd7000))
timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)
r2 = creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0)
dup2(r2, r0)

20:29:37 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x8)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
sendmmsg(r1, &(0x7f000000f740)=[{{&(0x7f0000009140)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x25d, &(0x7f0000000040), 0x0, &(0x7f000000a540)}}, {{&(0x7f000000a600)=@sco, 0x80, &(0x7f000000a780), 0x0, &(0x7f000000a7c0)=[{0x10, 0x10d, 0x1}], 0x10}}], 0x2, 0x0)

20:29:37 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/89, 0x59}], 0x2)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

20:29:37 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040))
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffff0000})
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
read(r2, &(0x7f0000000080)=""/19, 0xffffff5c)

20:29:37 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4042)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040))

20:29:37 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40})
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
read(r0, &(0x7f0000000000)=""/128, 0x80)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

20:29:37 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvfrom$unix(r0, &(0x7f0000000100)=""/232, 0xe8, 0x1, &(0x7f0000000200)=@abs, 0x6e)

[  339.335221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  339.363070] A link change request failed with some changes committed already. Interface sit0.0 may have been left with an inconsistent configuration, please check.
20:29:37 executing program 6:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18}, 0x18)
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff43)

20:29:37 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000b00)={&(0x7f0000000300), 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x90f, 0x0, 0x0, {{@in6, @in=@dev}, {@in6=@ipv4={[], [], @remote}, 0x0, 0x3c}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'rmd256-generic\x00'}}}]}, 0x13c}}, 0x0)

20:29:37 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/89, 0x59}], 0x2)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

[  339.700642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000020)
[  339.707868] FAT-fs (loop6): Filesystem has been set read-only
20:29:38 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

20:29:38 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18)
close(r3)
dup3(r1, r2, 0x0)

20:29:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
r3 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000140)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, &(0x7f0000000280)})

20:29:38 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000100)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/89, 0x59}], 0x2)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

20:29:38 executing program 2:
unshare(0x400)
r0 = eventfd2(0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002540)={0xffffffff80000005})
epoll_wait(r1, &(0x7f0000002500)=[{}], 0x1, 0xfffffffffffffffe)

20:29:38 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a00090000000600004d9b0000000000007e", 0x24}], 0x1}, 0x0)

20:29:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000700)=@in={0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/6, 0x6}], 0x1, &(0x7f0000000f40)=""/161, 0xa1}, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001040)=@rc, 0x80, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/86, 0x56}, {&(0x7f0000001140)=""/56, 0x38}, {&(0x7f0000001180)=""/211, 0xd3}], 0x3}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)=@ethernet, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f00000008c0)=""/238, 0xee}, {&(0x7f00000009c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/11, 0xb}], 0x8}, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000280)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/56, 0x2d}], 0x2af, &(0x7f0000000b80)=""/71, 0x47}, 0x0)

[  340.409221] binder: 23533:23539 BC_FREE_BUFFER u0000000020001000 matched unreturned buffer
[  340.418418] binder_alloc: 23533:23539 FREE_BUFFER u0000000020001000 user freed buffer twice
[  340.427027] binder: 23533:23539 BC_FREE_BUFFER u0000000020001000 no match
[  340.435126] binder_alloc: binder_alloc_mmap_handler: 23533 20001000-20004000 already mapped failed -16
[  340.449100] binder: BINDER_SET_CONTEXT_MGR already set
20:29:38 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40})
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
read(r0, &(0x7f0000000000)=""/128, 0x80)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  340.454765] binder: 23533:23539 ioctl 40046207 0 returned -16
[  340.462560] binder_alloc: 23533: binder_alloc_buf, no vma
[  340.468238] binder: 23533:23543 transaction failed 29189/-3, size 0-0 line 2967
[  340.478104] binder: 23533:23543 BC_FREE_BUFFER u0000000020001000 no match
[  340.491729] binder: 23533:23539 BC_FREE_BUFFER u0000000020001000 no match
20:29:38 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

[  340.505666] binder: release 23533:23539 transaction 158 out, still active
[  340.512789] binder: undelivered TRANSACTION_COMPLETE
[  340.524003] binder: send failed reply for transaction 158, target dead
[  340.538403] binder: undelivered TRANSACTION_ERROR: 29189
20:29:38 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6a, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20}, @cred={0x20}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2, 0x0, 0x0, r2}], 0xa0}], 0x1, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x15})
ioctl(r0, 0xc1004110, &(0x7f0000001f64))

20:29:38 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

20:29:38 executing program 2:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000000), 0x356)

20:29:38 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x0, 0x0, &(0x7f0000000080), 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"])
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae99, &(0x7f00000001c0))

20:29:38 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000140), 0xc, &(0x7f0000000b40)={&(0x7f0000000280)=@ipv6_getanyicast={0x14, 0x3e, 0x501, 0x0, 0x0, {}, ["", "", ""]}, 0x14}}, 0x0)

20:29:38 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

20:29:38 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

20:29:38 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xa7b)
write(r0, &(0x7f00000000c0)="90", 0x1)

20:29:39 executing program 7:
r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081)
write$eventfd(r0, &(0x7f00000000c0), 0x3c3)
write$P9_RREAD(r0, &(0x7f00000002c0)={0xb}, 0xb)

20:29:39 executing program 0:
mkdir(&(0x7f00000004c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, &(0x7f0000000140))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000000c0))
mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000))

20:29:39 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
unshare(0x400)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/40}, 0x18)

20:29:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f000001a000), 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002b00ffff000000020000000001000000"], 0x1}}, 0x0)

20:29:39 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xa7b)
write(r0, &(0x7f00000000c0)="90", 0x1)

20:29:39 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

20:29:39 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40})
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
read(r0, &(0x7f0000000000)=""/128, 0x80)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

20:29:39 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000028c0)={&(0x7f0000000140), 0xc, &(0x7f0000002880)={&(0x7f0000002680)={0x14}, 0x14}}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x9, 0x4)
close(r2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001a40)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000001040)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/165, 0xa5}], 0x1, &(0x7f00000013c0)=""/117, 0x75}}], 0x1, 0x0, &(0x7f0000001580))

20:29:39 executing program 1:
r0 = socket$inet6(0xa, 0x80005, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000013c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0x840000000003, 0x2)
setsockopt$inet_int(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
dup3(r1, r2, 0x0)

20:29:39 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5101, &(0x7f0000000000))

20:29:39 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)

20:29:39 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xa7b)
write(r0, &(0x7f00000000c0)="90", 0x1)

20:29:39 executing program 0:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

20:29:39 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, &(0x7f0000000000)={@local}, 0xfdf7)

20:29:39 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev}]}, &(0x7f0000000200)=0x10)
listen(r0, 0x2)
r1 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x80, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x14)

20:29:39 executing program 6:
sched_setaffinity(0x0, 0xfcc0, &(0x7f0000000080)=0x1)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000), &(0x7f0000048000), 0x0)

20:29:39 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0x1, 0x4)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10)
recvmmsg(r0, &(0x7f000000a740), 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35)

20:29:39 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x1)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xa7b)
write(r0, &(0x7f00000000c0)="90", 0x1)

20:29:39 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @loopback}, 0x10)

20:29:39 executing program 7:
pipe2(&(0x7f0000834000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000a000))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
vmsplice(r1, &(0x7f0000101000)=[{&(0x7f0000a68000)="f0", 0x1}], 0x1, 0x0)
ppoll(&(0x7f0000fb8fb0)=[{r2}], 0x1, &(0x7f0000006000)={0x0, 0x989680}, &(0x7f0000008ff8), 0x8)

20:29:39 executing program 0:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x4207, r1)
ptrace$setopts(0x420b, r1, 0x8, 0x907000)
move_pages(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000180)=[0x0], 0x0)

20:29:40 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r1, r0, 0x0)
r2 = epoll_create(0x420000000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000))

20:29:40 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40})
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
read(r0, &(0x7f0000000000)=""/128, 0x80)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

20:29:40 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil)

20:29:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4)

20:29:40 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCSBRK(r1, 0x80084504)

20:29:40 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc))
write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r1=>0x0)
sched_setaffinity(r1, 0x71, &(0x7f0000005000)=0xfffffffffffff579)
r2 = syz_open_pts(r0, 0x2)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000))

20:29:40 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

20:29:40 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

20:29:40 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCSBRK(r1, 0x80084504)

20:29:41 executing program 5:
mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002ffc))

20:29:41 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r1, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000100)=0x7b8b, 0x4)
recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x316}}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0xafe}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000000)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={0x0, 0x989680})

20:29:41 executing program 6:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ts_info})

20:29:41 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

20:29:41 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCSBRK(r1, 0x80084504)

20:29:41 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[])
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000480)=""/182, 0xb6}], 0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})
sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback}, 0x80)

20:29:41 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r1, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000100)=0x7b8b, 0x4)
recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x316}}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0xafe}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000000)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={0x0, 0x989680})

20:29:41 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

20:29:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendto(r2, &(0x7f0000000480)="b513e4be5af224ad226007521ef21d5acac17d6dd80cef96b05331d8f485efecfceed0321e985e159b3999b952d91beb97d1dd9575b97d5d4dd582d3f79db4c021fd5a7274ea185c388fc4a6fe7340ef8f8fdeee76b3e8d7ffacf5386bbe1fa37ace5799655a99ac57fb9de14e7dc690b05643e79fa8769aa4442a9edac2661b5f3514f3252f8bd3ee84945eee2bb7030d58041583ff1ee85e9ce988446c83588e80234807860f701ca8165ec70ba26afea228588f0dc777309085de1f60feb037c3f2d7e697e66af789e2eca8b9260495d3315df7862b4189a22fc48cb13999", 0xe0, 0x0, &(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2614c485abea76768d933995167dba93b3935f0f50e0b148a7c3d2fa16020ed988e6cbd6fdbbdc7bb3a944ec43dace33ecb7acf3f73576e16d13d7d2268a8b"}, 0x80)

20:29:41 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCSBRK(r1, 0x80084504)

20:29:41 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000007dc0)=[{0x0, 0x0, &(0x7f0000001a80), 0x0, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000880)={&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)=""/100, 0x64}], 0x1, &(0x7f0000000840)=""/38, 0x26}, 0x0)

20:29:41 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x20, 0x8aff, 0x0, 0x0, {0x5}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}}, 0x0)

20:29:41 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
unshare(0x60000000)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={"6d616e676c650000000000000000000000001700"}, &(0x7f0000000380)=0x54)

20:29:41 executing program 4:
r0 = socket$inet6(0xa, 0x805, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendto(r0, &(0x7f0000000500)='\\', 0x1, 0x0, &(0x7f00000000c0)=@generic={0xa, "ce52ad4548f98701e8b83e67eec675eb6449f442bcebff055db46786e6f45e02df804947ed942fddf5e334c1c05a832854edf4445d545ce8e51aa2389496131c0b9afbdd80c18512d377e01b68705784a7f4d886244bc9363ffedba8599ca553c3aa334f4b7caa1d2dfdf4813d6954b8ba620317cf2c77610015ceeee6a1"}, 0x80)
writev(r1, &(0x7f000051c000)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a843a0080ffe00600000000000000a2bc5603ca00000f7f89000000200012000101ff0000fa0209ff5bffff8ff600c7e5ed5e0000000009", 0x48}], 0x1)

20:29:41 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]})
ioctl$KVM_NMI(r2, 0xae9a)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10fb0"], 0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:41 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = gettid()
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x800000000000}, r1, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10)
r4 = socket$kcm(0x29, 0xfffffffffffffffa, 0x0)
ioctl(r4, 0x80000008912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r5 = socket$inet6(0xa, 0x8000000000000802, 0x0)
sendmsg$inet_sctp(r5, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000)
socket$inet6(0xa, 0x1, 0x6)
ioctl(r5, 0x2000004001008916, &(0x7f00000000c0)="125ed351b1863b957bfa74")
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000140), 0xe803, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000380)=""/4096, &(0x7f0000000000)=0x1000)
socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000280))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$packet(r8, &(0x7f0000000080)={0x0, 0x0, <r10=>0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14)
setsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f00000001c0)={@mcast1, r10}, 0x14)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @remote}, {0x4, 0x0, @broadcast}, {0x2, 0x0, @local}, 0x2d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='veth0\x00'})
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0x8, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @rand_addr=0x7}, 0x36, 0x1, 0x4, 0x2, 0x0, &(0x7f0000000040)='sit0\x00', 0x8b3d, 0x4000004, 0x7ff})
accept4(r11, &(0x7f0000003980)=@ipx, &(0x7f0000003a00)=0x80, 0x80800)

20:29:41 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = socket(0x0, 0x80000, 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}})
connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80)

[  343.778567] IPVS: ftp: loaded support on port[0] = 21
20:29:41 executing program 4:
syz_mount_image$ext4(&(0x7f00000009c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000940)={[{@journal_path={'journal_path', 0x3d, './file0'}}]})

[  343.815719] IPVS: ftp: loaded support on port[0] = 21
20:29:41 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3)
mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0)
writev(r0, &(0x7f0000001500)=[{&(0x7f00000011c0)="ec", 0x1}], 0x1)
close(r0)

20:29:42 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xtea-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000"], 0x10)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5)

20:29:42 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040), 0x8)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28)

[  344.038180] EXT4-fs (loop4): error: journal path ./file0 is not a block device
[  344.119245] EXT4-fs (loop4): error: journal path ./file0 is not a block device
20:29:42 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[])
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000480)=""/182, 0xb6}], 0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})
sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback}, 0x80)

20:29:42 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r1, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000100)=0x7b8b, 0x4)
recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x316}}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0xafe}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000000)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={0x0, 0x989680})

20:29:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
accept$inet(r0, 0x0, &(0x7f0000000080))

[  344.163376] tls_set_device_offload: netdev not found
20:29:42 executing program 7:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x23de4e66}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

20:29:42 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3)
mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0)
writev(r0, &(0x7f0000001500)=[{&(0x7f00000011c0)="ec", 0x1}], 0x1)
close(r0)

20:29:42 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x10, 0x803, 0xa)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3")
sendfile(r1, r2, &(0x7f0000000000), 0x80000002)

20:29:42 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x6, 0x8, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000200)}, 0x10)

20:29:42 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3)
mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0)
writev(r0, &(0x7f0000001500)=[{&(0x7f00000011c0)="ec", 0x1}], 0x1)
close(r0)

20:29:42 executing program 4:
r0 = socket$nl_xfrm(0x2, 0x6, 0x21)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10d, 0x10, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@newpolicy={0xb8, 0x13, 0x0, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}}}, 0xb8}}, 0x0)

20:29:42 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc08c5332, &(0x7f0000dc5f98))

[  344.796689] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  344.836013] IPVS: length: 4096 != 24
[  344.956965] IPVS: length: 4096 != 24
20:29:43 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x26b, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

20:29:43 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3)
mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0)
writev(r0, &(0x7f0000001500)=[{&(0x7f00000011c0)="ec", 0x1}], 0x1)
close(r0)

20:29:43 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000040), 0xe)
listen(r1, 0x0)

20:29:43 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r1, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000100)=0x7b8b, 0x4)
recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x316}}, {{&(0x7f0000000240)=@llc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000004300)=""/4096, 0xafe}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/117, 0x75}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000000)=""/14, 0xe}], 0xa, &(0x7f0000000bc0)=""/252, 0xfc, 0x6}}], 0x2, 0x10001, &(0x7f0000000dc0)={0x0, 0x989680})

20:29:43 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = socket(0x0, 0x80000, 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}})
connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80)

20:29:43 executing program 7:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0x102e6)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0)
ioctl$int_in(r0, 0x800000800c5012, &(0x7f00000004c0))

20:29:43 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0)
io_setup(0x5b3, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0x32}])

20:29:43 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[])
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000480)=""/182, 0xb6}], 0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})
sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback}, 0x80)

20:29:43 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x4d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)

20:29:43 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000d09fe9)='smaps\x00')
mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
pread64(r1, &(0x7f0000e3e000)=""/8, 0x8, 0x100000)

20:29:43 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480))
read$FUSE(r0, &(0x7f0000001000), 0x1000)
read$FUSE(r0, &(0x7f00000020c0), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
read$FUSE(r0, &(0x7f00000030c0), 0x1000)
write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x1, 0x0, 0xb, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90)

20:29:43 executing program 5:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18)

[  345.922772] IPVS: ftp: loaded support on port[0] = 21
20:29:44 executing program 5:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18)

[  345.955309] device lo entered promiscuous mode
[  345.964686] IPVS: You probably need to specify IP address on multicast interface.
[  345.973252] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  345.977673] IPVS: ftp: loaded support on port[0] = 21
[  346.087985] IPVS: ftp: loaded support on port[0] = 21
[  346.095093] IPVS: stopping master sync thread 23891 ...
20:29:44 executing program 5:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18)

[  346.167574] device lo entered promiscuous mode
[  346.177094] IPVS: You probably need to specify IP address on multicast interface.
[  346.186025] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  346.292715] IPVS: ftp: loaded support on port[0] = 21
[  346.376627] device lo entered promiscuous mode
[  346.394236] IPVS: You probably need to specify IP address on multicast interface.
20:29:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, 0x1, [@broadcast]})

20:29:44 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = socket(0x0, 0x80000, 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}})
connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80)

[  346.425253] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
20:29:44 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x26b, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

20:29:44 executing program 5:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000005c0)={0x1, 'lo\x00'}, 0x18)

20:29:44 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000040), 0xe)
listen(r1, 0x0)

20:29:44 executing program 6:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[])
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000480)=""/182, 0xb6}], 0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})
sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback}, 0x80)

[  346.629585] IPVS: ftp: loaded support on port[0] = 21
20:29:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, 0x1, [@broadcast]})

[  346.790608] device lo entered promiscuous mode
[  346.816649] IPVS: You probably need to specify IP address on multicast interface.
[  346.842434] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  347.040190] IPVS: stopping master sync thread 23934 ...
[  347.045831] IPVS: stopping master sync thread 23905 ...
[  347.051529] IPVS: stopping master sync thread 23897 ...
20:29:46 executing program 7:
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[]}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000740)}, 0x20004040)

20:29:46 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000040), 0xe)
listen(r1, 0x0)

20:29:46 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870c8, &(0x7f00000001c0))

20:29:46 executing program 6:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
io_setup(0x8, &(0x7f0000000140)=<r2=>0x0)
r3 = socket(0x1e, 0x1000000000005, 0x0)
sendmsg(r3, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0)
io_getevents(r2, 0x0, 0x80000000000026b, &(0x7f0000000240), &(0x7f0000000000)={0x0, 0x1c9c380})
io_submit(r2, 0x76, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}])

20:29:46 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, 0x1, [@broadcast]})

20:29:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000000), 0x20000020)

20:29:46 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x26b, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

20:29:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = socket(0x0, 0x80000, 0xfffffffffffffffd)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='syz_tun\x00', 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x400, 0x0, 0x1f}]}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @rand_addr}, &(0x7f0000000080)=0x8)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'bcsf0\x00', {0x2, 0x4e23, @local}})
connect(r1, &(0x7f00000012c0)=@nl=@unspec, 0x80)

20:29:46 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10000032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @remote}], 0x48)
close(r2)
close(r1)

20:29:46 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000040), 0xe)
listen(r1, 0x0)

20:29:46 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000222000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000001fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000b7ff8)={0x0, 0x269}, &(0x7f0000000000)=0x725)

20:29:46 executing program 6:
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400})
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5385, &(0x7f0000000000))

20:29:46 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, 0x1, [@broadcast]})

20:29:46 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x5bae76821f9b410f})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="0f2334660f38821666ba210066ed66baf80cb8a804ab89ef66bafc0ced0f20c035000000800f22c0b8010000000f01c1b9800000c00f3235000100000f30400f07e4a9460f01df", 0x47}], 0x1, 0x0, &(0x7f0000000180), 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:46 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r1, r0, &(0x7f0000000180)=0x1a, 0x8001)

20:29:46 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f00000003c0)="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", 0x130)

20:29:46 executing program 6:
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x200000000000000a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000002800000850000002700000005000000000000009500000000000000"], &(0x7f00000000c0)="00007bf056c718041899f95b1a", 0x1, 0xce, &(0x7f0000000380)=""/206}, 0x48)

20:29:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000003040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0)
sendmmsg$unix(r1, &(0x7f0000001000)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="b6cdf141498a9b9ec73d87f1fea3251e5ca5ad9b75023700be1e2bdc3e234417886acd902ebeedc28567d5378bb878a2a0e504", 0x33}, {&(0x7f0000000400)="2e21899a70f0060b7e630099e6b5459d1e2ff9eaab5ce223cb76fab935fabb86cdb8667142f5e3f855cc0c4abdb4a26852d0d6a4e7ee1fbca9228e5ec8f47e8f978a10d7a9", 0x45}], 0x2, &(0x7f0000000940)}], 0x1, 0x8000)
recvfrom(r1, &(0x7f0000000000)=""/19, 0x13, 0x0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="1bf330c5f38c"}, 0x933700)

20:29:46 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000000040))

20:29:47 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x5bae76821f9b410f})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="0f2334660f38821666ba210066ed66baf80cb8a804ab89ef66bafc0ced0f20c035000000800f22c0b8010000000f01c1b9800000c00f3235000100000f30400f07e4a9460f01df", 0x47}], 0x1, 0x0, &(0x7f0000000180), 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:47 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f00000003c0)="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", 0x130)

20:29:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x20007ffc)

20:29:47 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x26b, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
dup2(r0, r1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

20:29:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb8030000)

20:29:47 executing program 5:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff95, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffe5}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16)

20:29:47 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x100000002, 0x0)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726905002530f5d6de7244c5250b007369743000000000000000ea000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e74000000000000000000000000000000000000f200000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000300000000000000001800000000000000000000000000000400000000000000000000000000000000736e6174000000000000000000000000000000000200000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000e00000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e300000000000000000000600797a6b616c6c6572300000000000000180c2000000000000200000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)

20:29:47 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f00000003c0)="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", 0x130)

20:29:47 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x5bae76821f9b410f})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="0f2334660f38821666ba210066ed66baf80cb8a804ab89ef66bafc0ced0f20c035000000800f22c0b8010000000f01c1b9800000c00f3235000100000f30400f07e4a9460f01df", 0x47}], 0x1, 0x0, &(0x7f0000000180), 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x20007ffc)

20:29:47 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
read$FUSE(r1, &(0x7f0000001000), 0x1000)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)

20:29:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb8030000)

20:29:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb8030000)

20:29:47 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f00000003c0)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db75411543e1226408e88cac1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e5de7e4f28bca763acd06f40ad03226af55e3129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade402525c03f838fb6e006002c962d916c000000000000003400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc2b5bbc156c2a1976a0f57350aeb077c8e7b6add33568313c06740b2847df11fc45e0ec4a26d4662cbc7336eb57808181c5a5d502dccd35a8a83fe6e00ad7ba5ae2e76eb8aabc3f4d990bc4a9caa55a817596a907c1f39a", 0x130)

20:29:47 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x5bae76821f9b410f})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="0f2334660f38821666ba210066ed66baf80cb8a804ab89ef66bafc0ced0f20c035000000800f22c0b8010000000f01c1b9800000c00f3235000100000f30400f07e4a9460f01df", 0x47}], 0x1, 0x0, &(0x7f0000000180), 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:47 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x20007ffc)

20:29:47 executing program 2:
mremap(&(0x7f0000672000/0x4000)=nil, 0x4000, 0x4000, 0x10003, &(0x7f0000223000/0x4000)=nil)

20:29:47 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x4038ae7a, 0x80efff)

20:29:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb8030000)

20:29:48 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x20007ffc)

20:29:48 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x2000cfad, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48)

20:29:48 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000d00)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000d40)=0x10)

20:29:48 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
read(r2, &(0x7f0000000280)=""/1, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc))
ioctl$TCSETAF(r2, 0x5457, &(0x7f0000000000))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

20:29:48 executing program 4:
r0 = socket$inet(0x15, 0x80005, 0x0)
bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000012000), 0x0, &(0x7f0000000100)=[{0x58, 0x114, 0x6, "5b201197c5a31bf1159d1b5b410c2b040a0500000097c16603032280c667fe4b4cb11f91ea8d514646179404dcd3fc1000afc284d18db58b04ce6a80d3dd89e5a7"}], 0x58}, 0x0)

20:29:48 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, 0x0})
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000100)=0x4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000001c0))

20:29:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1)

20:29:48 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f000000dff8)=@file={0x1}, 0x2)
listen(r0, 0x0)
poll(&(0x7f00003a3fd8)=[{r0}], 0x1, 0x0)

20:29:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8})

20:29:48 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x100000, 0xffffff2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dc]}, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040))

20:29:48 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x4b)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

20:29:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1)

20:29:48 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_stats})
close(r2)
close(r1)

20:29:48 executing program 6:
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)

20:29:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1)

20:29:48 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0xa, 0x1, 0x0)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="feffffffff00000000480000000000000600000008"])
ioctl(r1, 0x8916, &(0x7f0000000000))
ioctl(r1, 0x8936, &(0x7f0000000000))

20:29:48 executing program 7:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x4c8, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x200006b0], 0x0, &(0x7f0000000040), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'lo\x00', '\x00', 'nr0\x00', 'ipddp0\x00', @empty, [], @link_local, [], 0x2e8, 0x358, 0x390, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x1}}}, @bpf0={'bpf\x00', 0x210}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev}}}, @snat={'snat\x00', 0x10}]}, @arpreply={'arpreply\x00', 0x10, {{@local}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'yam0\x00', 'bridge_slave_1\x00', 'veth0_to_bridge\x00', 'syz_tun\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x540)

20:29:48 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000461fa8)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(seed))\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8)

20:29:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x9)
setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4)
write(r0, &(0x7f0000000040)="22000000469c71b652770c18027c4e47d7b1ccff652186979f580700f417e512b87c", 0x22)

[  350.808750] tls_set_device_offload_rx: netdev lo with no TLS offload
[  351.001580] xt_bpf: check failed: parse error
20:29:49 executing program 6:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
r1 = socket$inet6(0xa, 0x1000000000003, 0x100000003)
ioctl(r1, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070")
setrlimit(0x1, &(0x7f0000011000))
write$eventfd(r0, &(0x7f00000001c0), 0x8)

20:29:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8})

20:29:49 executing program 7:
rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8)
clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000))
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r1, 0xa, 0x12)
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0})
recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0)
dup2(r1, r2)
tkill(r0, 0x15)
wait4(0x0, 0x0, 0x60000002, &(0x7f0000000000))

20:29:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x10000000002, &(0x7f000063a000)=0x2fe, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

20:29:49 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4)
sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e24, 0x0, @remote}, 0x1c)

20:29:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1)

20:29:49 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@srh, 0x8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000200)={@mcast1}, 0x20)

20:29:49 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0))
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r0, 0x1000000000016)
bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

[  351.629490] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
20:29:49 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/228, &(0x7f0000000080)=0x18)

20:29:49 executing program 6:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0)
sendto$llc(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10)
dup3(r0, r1, 0x0)

20:29:49 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup2(r1, r0)
write$cgroup_subtree(r2, &(0x7f0000000380), 0x0)

20:29:49 executing program 4:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000), 0x10)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)
mlock2(&(0x7f0000a44000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008)

20:29:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8})

[  351.744913] libceph: connect [a::2:e]:6789 error -101
[  351.750256] libceph: mon0 [a::2:e]:6789 connect error
[  351.756468] libceph: connect [a::2:e]:6789 error -101
[  351.761982] libceph: mon0 [a::2:e]:6789 connect error
20:29:49 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f06762070")
syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000340)="11c369652be0cc1fa326d1a729bf511d919eb424511a6a71eefdbe3b4522265971d97a9c315bf8c7403f4b56004ea7f43d75d6e3e20f089ff9a7eb9841e121b2c2f17a1befbb93c37e1b000077bcf6c38b1114859a50129f58daf6297d4aba0d6935c4c7e3bbd989d659776163576b14e12132b2fac4f3e146a1b4bfb21f099a73d037c3d388fda261e40f577ff18e512d14631b574230ac1c443a1960488e1ff33198052d157cca5c48d2b01ad9b90e653d036b6b467cff346f35c30b5c05b22736bb3da847d16ff482a84dc04300037fa36744eb", 0xd5, 0x101}])

20:29:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8)
writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1)

20:29:49 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
unshare(0x400)
setsockopt$inet6_int(r1, 0x29, 0x2f, &(0x7f00000000c0), 0x4)

20:29:49 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8})

20:29:49 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000d73000)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}]}, 0x50}}, 0x0)

[  351.998561] Dev loop6: unable to read RDB block 1
[  352.003656]  loop6: AHDI p1 p2
[  352.006904] loop6: partition table partially beyond EOD, truncated
[  352.038360] loop6: p1 start 2192068032 is beyond EOD, truncated
[  352.074482] Dev loop6: unable to read RDB block 1
[  352.079598]  loop6: AHDI p1 p2
[  352.082916] loop6: partition table partially beyond EOD, truncated
[  352.091058] loop6: p1 start 2192068032 is beyond EOD, truncated
[  352.532724] libceph: connect [a::2:e]:6789 error -101
[  352.538103] libceph: mon0 [a::2:e]:6789 connect error
[  352.558903] libceph: connect [a::2:e]:6789 error -101
[  352.564389] libceph: mon0 [a::2:e]:6789 connect error
20:29:52 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005240)={0x0, <r1=>0x0}, &(0x7f0000005280)=0xc)
syz_mount_image$hfs(&(0x7f0000001180)='hfs\x00', &(0x7f0000003e00)='./file0\x00', 0x0, 0x0, &(0x7f0000005140), 0x0, &(0x7f00000052c0)={[{@uid={'uid', 0x3d, r1}}]})

20:29:52 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
unshare(0x400)
setsockopt$inet6_int(r1, 0x29, 0x2f, &(0x7f00000000c0), 0x4)

20:29:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='environ\x00')
close(r1)

20:29:52 executing program 3:
clock_nanosleep(0x9, 0x41, &(0x7f000084fff0), &(0x7f0000fd9000))

20:29:52 executing program 2:
add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0), &(0x7f0000000100), 0xfffff, 0xffffffffffffffff)

20:29:52 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0)

20:29:52 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f00000004c0), &(0x7f0000000500)="e4", 0x1, 0xfffffffffffffffb)

20:29:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000a00)='./file0/*ile0\x00', 0x0)

20:29:52 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
unshare(0x400)
setsockopt$inet6_int(r1, 0x29, 0x2f, &(0x7f00000000c0), 0x4)

20:29:52 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x201771}, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x10000, 0x462, &(0x7f00001a7f05)=""/251}, 0x48)

20:29:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)})

20:29:52 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0)
r1 = memfd_create(&(0x7f0000000180)='dev ', 0x0)
write(r1, &(0x7f0000000040)="16", 0x1)
sendfile(r0, r1, &(0x7f0000000000), 0xffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r2, r1, 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8000000000008912, &(0x7f0000000280)="025cc83d69345f8f762070")
r4 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1004000000016)

20:29:52 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070")
r1 = socket(0xa, 0x80005, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x83})
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x1000})

20:29:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000a00)='./file0/*ile0\x00', 0x0)

20:29:52 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f0000000080)='}\x00', 0x0)
mmap(&(0x7f0000002000/0xc000)=nil, 0xc000, 0x0, 0x11, r1, 0x0)
mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f000000a000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000004000/0x4000)=nil, 0x4000)

[  354.644784] hfs: uid requires an argument
[  354.649184] hfs: unable to parse mount options
[  354.683975] hfs: uid requires an argument
[  354.688383] hfs: unable to parse mount options
20:29:52 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000d83ff8), 0xb3af)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080))
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0)

20:29:52 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
unshare(0x400)
setsockopt$inet6_int(r1, 0x29, 0x2f, &(0x7f00000000c0), 0x4)

[  354.762205] binder: 24286:24294 ERROR: BC_REGISTER_LOOPER called without request
20:29:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100008000000000000000130d4f"])
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0xc0010140]})

[  354.822628] binder: 24286:24300 ERROR: BC_REGISTER_LOOPER called without request
20:29:52 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)})
bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa)

20:29:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000a00)='./file0/*ile0\x00', 0x0)

20:29:52 executing program 3:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000000), 0x13d6c7a2f9b4add0, 0x1, 0x0)

20:29:52 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)

20:29:52 executing program 0:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
userfaultfd(0x0)
unshare(0x8000400)
syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
pselect6(0x37, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f00000000c0), 0x8})

20:29:53 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r1, 0xaf01, &(0x7f00001e3000))
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4008af03, &(0x7f0000000000)=r2)

[  355.032128] syz-executor7 (24313) used greatest stack depth: 13568 bytes left
20:29:53 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06)
recvmmsg(r1, &(0x7f00000040c0)=[{{&(0x7f00000012c0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001680)=""/5, 0x5}, {&(0x7f0000001700)=""/195, 0xc3}], 0x2, &(0x7f00000018c0)=""/185, 0xb9}}], 0x2, 0x0, &(0x7f0000004280)={0x77359400})

20:29:53 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000d83ff8), 0xb3af)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080))
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0)

20:29:53 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'irlan0\x00'}, 0x18)

[  355.266470] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0
[  355.275539] IPVS: stopping master sync thread 24362 ...
[  355.283940] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0
[  355.292993] IPVS: stopping master sync thread 24364 ...
20:29:53 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
ftruncate(r1, 0x40001)
finit_module(r1, &(0x7f0000000240)='^\x00', 0x0)

20:29:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x232)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xff})

20:29:53 executing program 0:
mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000b75000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f000033d000/0x3000)=nil)
clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff))

20:29:53 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$bt_hci(r1, 0x65, 0x4, &(0x7f0000000280)=""/244, &(0x7f0000000140)=0xf4)

20:29:53 executing program 5:
r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x324, &(0x7f0000000100)=[{}]}, 0x10)

20:29:53 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000a07fff))

20:29:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000a00)='./file0/*ile0\x00', 0x0)

20:29:53 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000d83ff8), 0xb3af)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080))
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0)

20:29:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x232)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xff})

20:29:53 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {0x77359400}, {0x0, 0x7530}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0)

20:29:53 executing program 0:
r0 = socket$inet(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)

20:29:53 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000101, 0x0, 0x0, 0x1000000}]})

20:29:53 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000040)="e170b805000000b9b9f400000f01c166420faebb0b00000066b865000f00d86566430f38827a110f215c440f01f8c4a151dcc2f3acc4a2a1a71c15fbffffff", 0x3f}], 0x1, 0x0, &(0x7f0000000000)=[@cr4={0x1, 0x400000}], 0x1)
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0))

20:29:53 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00')
r2 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='s'], 0x1)
readv(r1, &(0x7f0000001680)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x4)

20:29:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x232)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xff})

20:29:54 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000a07fff))

20:29:54 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000d83ff8), 0xb3af)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080))
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0)

20:29:54 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0xfff7fffffffffffe, 0x0, &(0x7f00000001c0)})

20:29:54 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = dup(r2)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$BLKIOOPT(r3, 0x4008af23, &(0x7f0000000080))
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000001c0))
close(r0)

20:29:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000040)="e170b805000000b9b9f400000f01c166420faebb0b00000066b865000f00d86566430f38827a110f215c440f01f8c4a151dcc2f3acc4a2a1a71c15fbffffff", 0x3f}], 0x1, 0x0, &(0x7f0000000000)=[@cr4={0x1, 0x400000}], 0x1)
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0))

20:29:54 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10)

20:29:54 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000))

20:29:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x232)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xff})

20:29:54 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000a07fff))

20:29:54 executing program 0:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000000)="24000000190001f0008000361731ed640adfa90100b70006000000cc08000f00fed70000", 0x24)

20:29:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000040)="e170b805000000b9b9f400000f01c166420faebb0b00000066b865000f00d86566430f38827a110f215c440f01f8c4a151dcc2f3acc4a2a1a71c15fbffffff", 0x3f}], 0x1, 0x0, &(0x7f0000000000)=[@cr4={0x1, 0x400000}], 0x1)
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0))

20:29:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x40000006}}, 0x14}}, 0x0)

20:29:54 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8020000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r0, 0x0)

20:29:54 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000a07fff))

20:29:54 executing program 6:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000140), 0x1400)

20:29:54 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
mkdir(&(0x7f0000508ff6)='./control\x00', 0x0)
read(r1, &(0x7f0000e6d000)=""/384, 0x180)
close(r1)
r2 = inotify_init1(0x0)
fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3)
r3 = gettid()
fcntl$setown(r2, 0x8, r3)
rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8)
fcntl$setsig(r2, 0xa, 0x20)
inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960)
open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0)

20:29:54 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

20:29:54 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000040)="e170b805000000b9b9f400000f01c166420faebb0b00000066b865000f00d86566430f38827a110f215c440f01f8c4a151dcc2f3acc4a2a1a71c15fbffffff", 0x3f}], 0x1, 0x0, &(0x7f0000000000)=[@cr4={0x1, 0x400000}], 0x1)
ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000001c0))

20:29:54 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8})

20:29:55 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = dup(r2)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$BLKIOOPT(r3, 0x4008af23, &(0x7f0000000080))
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000001c0))
close(r0)

20:29:55 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x3, 0x9010000000000084)
sendto$inet6(r1, &(0x7f0000000000)="482e0000000000000002d61d01b1baa9", 0x10, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)

20:29:55 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x40045109, &(0x7f0000a07fff))

20:29:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockname$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10)

20:29:55 executing program 0:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x80000000000b, &(0x7f00000000c0)="35eb9e24", 0x4)

20:29:55 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="f1cec3281d34", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280))

20:29:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:55 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10)
accept(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80)

20:29:55 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x3, 0x9010000000000084)
sendto$inet6(r1, &(0x7f0000000000)="482e0000000000000002d61d01b1baa9", 0x10, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)

20:29:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockname$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10)

20:29:55 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="f1cec3281d34", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280))

20:29:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x100, 0x0)

20:29:55 executing program 7:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r0, &(0x7f0000001780))

20:29:55 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000380)={0x2, 0x9, 0xfa00, {0x0, {}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

20:29:55 executing program 2:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x90000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000001040), 0x0)
futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4)

20:29:55 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
close(r1)

[  357.774122] can: notifier: receive list not found for dev tap0
20:29:56 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = dup(r2)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$BLKIOOPT(r3, 0x4008af23, &(0x7f0000000080))
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000001c0))
close(r0)

20:29:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockname$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10)

20:29:56 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="f1cec3281d34", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280))

20:29:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x3, 0x9010000000000084)
sendto$inet6(r1, &(0x7f0000000000)="482e0000000000000002d61d01b1baa9", 0x10, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)

20:29:56 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$pppoe(0x18, 0x1, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000640))
io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}])

20:29:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
close(r1)

20:29:56 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8000000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2000008010300ec1f01000100030000000000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700670000c88ebbff060115003901000000000000ea000000000000000002ffff02df9eebe7ec7ee87cccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b748700000000000000000000000", 0xb8)

20:29:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
getsockname$llc(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10)

20:29:56 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$pppoe(0x18, 0x1, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000640))
io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}])

20:29:56 executing program 7:
capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000740)={0xfffffffffffffffe, 0xffffffffffffffff})
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)

20:29:56 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x3, 0x9010000000000084)
sendto$inet6(r1, &(0x7f0000000000)="482e0000000000000002d61d01b1baa9", 0x10, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)

20:29:56 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="f1cec3281d34", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280))

20:29:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
close(r1)

[  358.197330] can: notifier: receive list not found for dev tap0
20:29:56 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x21, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040))

[  358.416948] can: notifier: receive list not found for dev tap0
20:29:56 executing program 6:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x0)

20:29:56 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
r3 = dup2(r2, r1)
write$sndseq(r2, &(0x7f0000000380), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x8, 0x0, 0x1000800003fd, @tick, {}, {}, @raw32}], 0x30)

20:29:57 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = dup(r2)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$BLKIOOPT(r3, 0x4008af23, &(0x7f0000000080))
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000001c0))
close(r0)

20:29:57 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$pppoe(0x18, 0x1, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000640))
io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}])

20:29:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x27, 0x1aff, 0x0, 0x0, {0x15}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0)

20:29:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
close(r1)

20:29:57 executing program 4:
r0 = socket$packet(0x11, 0x800000000002, 0x300)
getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

20:29:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x10a]})

20:29:57 executing program 6:
r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f73eeb7c37c7240f476c8d753d000aa8faf8fb574d781a5a24d"})
r1 = memfd_create(&(0x7f000003e000)='\t', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r2, r1)
write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)
r3 = memfd_create(&(0x7f00008effff)='\t', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r4, r3)
write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)

20:29:57 executing program 7:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000000c0)='./control/file0\x00')
rmdir(&(0x7f000015dff6)='./control\x00')
unlink(&(0x7f0000000140)='./control/file0\x00')
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
close(r1)

20:29:57 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

20:29:57 executing program 6:
r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f73eeb7c37c7240f476c8d753d000aa8faf8fb574d781a5a24d"})
r1 = memfd_create(&(0x7f000003e000)='\t', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r2, r1)
write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)
r3 = memfd_create(&(0x7f00008effff)='\t', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r4, r3)
write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)

20:29:57 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$pppoe(0x18, 0x1, 0x0)
io_setup(0x1, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000640))
io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}])

20:29:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000400), &(0x7f0000000480)=0x68)

20:29:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000001880)='/dev/snd/controlC#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/236)

[  359.251878] can: notifier: receive list not found for dev tap0
20:29:57 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

20:29:57 executing program 6:
r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f73eeb7c37c7240f476c8d753d000aa8faf8fb574d781a5a24d"})
r1 = memfd_create(&(0x7f000003e000)='\t', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r2, r1)
write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)
r3 = memfd_create(&(0x7f00008effff)='\t', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r4, r3)
write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)

20:29:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:58 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl(r0, 0x100000001, &(0x7f0000000280)="cbe9")

20:29:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:58 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

20:29:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef0100010000006e5fbe5a000000000000000001000000000000000b000000800000002c", 0x5d, 0x400}], 0x0, &(0x7f0000012e00))

20:29:58 executing program 3:
r0 = socket(0x40000000015, 0x805, 0x0)
bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0), 0xf, &(0x7f0000000300)}, 0x4000000)

20:29:58 executing program 6:
r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f73eeb7c37c7240f476c8d753d000aa8faf8fb574d781a5a24d"})
r1 = memfd_create(&(0x7f000003e000)='\t', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r2, r1)
write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)
r3 = memfd_create(&(0x7f00008effff)='\t', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x8000000000102)
dup2(r4, r3)
write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)

20:29:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:58 executing program 7:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000000c0)='./control/file0\x00')
rmdir(&(0x7f000015dff6)='./control\x00')
unlink(&(0x7f0000000140)='./control/file0\x00')
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
close(r1)

20:29:58 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@remote, @loopback}, 0xc)

20:29:58 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}})
preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0)

[  360.242616] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  360.250585] EXT4-fs (loop5): bad geometry: block count 2048 exceeds size of device (2 blocks)
20:29:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
dup2(r0, r1)
ioctl$TCSETSW(r1, 0x5437, &(0x7f0000002000))

20:29:58 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

20:29:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef0100010000006e5fbe5a000000000000000001000000000000000b000000800000002c", 0x5d, 0x400}], 0x0, &(0x7f0000012e00))

[  360.301167] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  360.308742] EXT4-fs (loop5): bad geometry: block count 2048 exceeds size of device (2 blocks)
20:29:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:58 executing program 0:
getpgid(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
dup2(r0, r1)

20:29:58 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r0)

20:29:58 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={"626f6e6430000000000000000100", @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000040)}})

[  360.537481] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  360.545209] EXT4-fs (loop5): bad geometry: block count 2048 exceeds size of device (2 blocks)
20:29:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:58 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
io_setup(0x0, &(0x7f0000001a00))
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

20:29:58 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef0100010000006e5fbe5a000000000000000001000000000000000b000000800000002c", 0x5d, 0x400}], 0x0, &(0x7f0000012e00))

20:29:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f00006ed000), &(0x7f0000000180)=0x4)

20:29:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0xc922, 0x0, 0x6}]}, 0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000b3200000000000000d321000000000000"], 0x1}}, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000180)="a142f75bc39f4b47f9587b2572e79fa6b144788d91f7bb7b89d574113f803b937e81bb2c4aa49591da70a4f195a92ab852172a9dfe1123f6b620dad855fddcf2c873201a7c1c3bf72dfc5b6bf225adc246b4f7a9b1e44eff0dfea32e3730b38383f48fcb3836bfd6453c77bf1677", &(0x7f00000002c0)=""/96}, 0x18)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4000, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4)
sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c)
ioctl$int_out(r0, 0x5462, &(0x7f0000000480))
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4)
sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4)

[  360.766831] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  360.774568] EXT4-fs (loop5): bad geometry: block count 2048 exceeds size of device (2 blocks)
20:29:59 executing program 7:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000000c0)='./control/file0\x00')
rmdir(&(0x7f000015dff6)='./control\x00')
unlink(&(0x7f0000000140)='./control/file0\x00')
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
close(r1)

20:29:59 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef0100010000006e5fbe5a000000000000000001000000000000000b000000800000002c", 0x5d, 0x400}], 0x0, &(0x7f0000012e00))

20:29:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa28300070002d418000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:29:59 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000fb6000)=""/28, 0x3f0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xbf})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000002c0))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000))
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280440, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x73, @empty, 0x4e22, 0x3, 'lblcr\x00', 0x8, 0x1}, {@remote, 0x0, 0x0, 0x15, 0x3f, 0xfff}}, 0x44)

20:29:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0), 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$inet6(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000006c0)=0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806)
socket$inet6(0xa, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
write$cgroup_int(r5, &(0x7f0000000000), 0x1)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, &(0x7f0000000240)=0x300, 0x20000102000007)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x81})

20:29:59 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0xfffffdca, 0x0, &(0x7f0000008f37)})
dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0x0, 0x0, &(0x7f0000000100)})

20:29:59 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
shutdown(r0, 0x1)

[  361.454146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  361.467716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  361.489884] binder: 24806:24816 unknown command 536907575
20:29:59 executing program 0:
r0 = userfaultfd(0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1})
modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff}, 0x10)
r2 = userfaultfd(0x0)
close(r2)
clone(0x0, &(0x7f0000001f37), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180))
read(r0, &(0x7f0000000400)=""/100, 0x64)
socket$inet6(0xa, 0x0, 0x0)
dup3(r0, r2, 0x0)

[  361.498042] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  361.505780] EXT4-fs (loop5): bad geometry: block count 2048 exceeds size of device (2 blocks)
[  361.515330] binder: 24806:24816 ioctl c0306201 20008fd0 returned -22
[  361.522795] binder: 24806:24818 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  361.537454] binder: undelivered death notification, 0000000000000000
[  361.537823] binder: 24806:24816 BC_DEAD_BINDER_DONE 0000000000000000 not found
20:29:59 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000040))

20:29:59 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef01005ceb4fd2e515217e010000006e5fbe5a000000003e8b1a0826bb290000000001000000000000000bc4", 0x65, 0x400}], 0x0, &(0x7f0000012e00))

20:29:59 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
io_setup(0x0, &(0x7f0000001a00))
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

20:29:59 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
getsockopt$inet_mtu(r3, 0x0, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {}, 0x0, {0x2, 0x0, @multicast1}, 'erspan0\x00'})
close(r3)
dup3(r1, r2, 0x0)

20:29:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x1)

[  361.916848] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  361.925385] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (b000000)
[  361.945234] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  361.953797] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (b000000)
20:29:59 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002000)=0xf08, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000799ffc)=0x7fc, 0x4)

20:30:00 executing program 5:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000e40)="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", 0x236, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/196, 0xc4}], 0x1}}], 0x1, 0x0, &(0x7f0000004540)={0x0, 0x989680})

20:30:00 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0xa70, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001100], 0x0, &(0x7f0000000000), &(0x7f0000001100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'veth1_to_bond\x00', 'ip_vti0\x00', 'rose0\x00', 'veth1_to_team\x00', @remote, [], @empty, [], 0x908, 0x908, 0x940, [@among={'among\x00', 0x838, {{0xc, 0x0, 0x0, {[], 0x1, [{[], @dev}]}, {[], 0x1, [{[], @remote}]}}}}, @mac={'mac\x00', 0x10}]}}, @common=@mark={'mark\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'bond_slave_0\x00', '\x00', "726f736530000200", 'ipddp0\x00', @random="e915b0505f73", [], @local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xae8)

[  362.434386] ebt_among: wrong size: 2104 against expected 1056, rounded to 1056
[  362.445885] ebt_among: wrong size: 2104 against expected 1056, rounded to 1056
20:30:00 executing program 7:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000000c0)='./control/file0\x00')
rmdir(&(0x7f000015dff6)='./control\x00')
unlink(&(0x7f0000000140)='./control/file0\x00')
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
close(r1)

20:30:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:30:00 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8})

20:30:00 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000a000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xd7, &(0x7f0000000280)="3c2dbcd405e8e96a639a2feea71b", &(0x7f0000000380)=""/215}, 0x28)

20:30:00 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}]})

[  362.736606] FAT-fs (loop2): bogus number of reserved sectors
[  362.742851] FAT-fs (loop2): Can't find a valid FAT filesystem
[  362.775851] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
20:30:00 executing program 3:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0), 0x30, &(0x7f0000000140)={[{@orlov='orlov'}]})

20:30:00 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
io_setup(0x0, &(0x7f0000001a00))
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

20:30:00 executing program 0:
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], 0xfffffff6})

20:30:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  362.824322] FAT-fs (loop2): bogus number of reserved sectors
[  362.830384] FAT-fs (loop2): Can't find a valid FAT filesystem
[  362.866314] FAT-fs (loop2): bogus number of reserved sectors
[  362.872279] FAT-fs (loop2): Can't find a valid FAT filesystem
20:30:00 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a00000ce600001000e0c90002000000000000000000000000000000f0ffffff000b00000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x6e, 0x0)

20:30:00 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045004, &(0x7f00006e1000))

[  363.012522] EXT4-fs (sda1): Ignoring removed orlov option
[  363.018644] EXT4-fs (sda1): re-mounted. Opts: orlov,,errors=continue
[  363.025216] jfs: Unrecognized mount option "ö" or missing value
[  363.044977] EXT4-fs (sda1): Ignoring removed orlov option
[  363.051292] EXT4-fs (sda1): re-mounted. Opts: orlov,,errors=continue
20:30:01 executing program 3:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0), 0x30, &(0x7f0000000140)={[{@orlov='orlov'}]})

20:30:01 executing program 0:
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], 0xfffffff6})

[  363.068897] jfs: Unrecognized mount option "ö" or missing value
20:30:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"ee44f6c4462ead07ba4b32701c283f44b42a4da119ed420e3deab8a69deb514b60b4363a3329d9d5bac37ac5524bc2218f6aa1d2ae323266ba9c4bbc1af65be12509893321b9296ead9262139eebb18833c543805df08837c9dcce7784d6e4e919e37ecca29a2b008c2f2e918bf8c7c6c75372ca459e25f18cc3e06ab93636d7468bce84fad46dff7efdb3968d59a2687a3e8c06362d6f847e25cd6b551c5a52eadd875f51894442522a829c4bef59a57df780ddf98c20b220ecf23f7dd707d88450cbd9647f8b48b33b74ecc4a2b8018435fd0bf01c03d554203f63407f36a47250c11cd9f2bb2a4cc19d4494bed1b0080520130c49a11a642455fd6f334232045427951ae28773093daec7c2a98ab732c6897a948ce4d90b0b600bdd206e0347aaf4f936ce68c5ceb70e9e29bbb1a5719d3b0c453d4c15c8f985ae6e301c16838dbf323001c22f88ca2c860c829b7a628f961cb30feba5b491c99010aa0f1f78a708ebd8f8ffba5614dfa080dc89400ed6ab59f47eb55aaa2b1119843fda043abac90d1a0c5dd199c195f6f66ec20b9b78b0e5638ebba8f5bf9b3a43bf574ddb0a6fad5743574cfda8ce45c5ddcf447db60007bdebfdef06245952ed45d02c6f74c06761100a004c49b90c76e02de27ea86d9d4d4ab9832f7a4f8ec9f6360ca5eab3babe11195209a878f2d99de91bd02f5813db33f9b42caefc0e489a097ce63155f5cf7fd06cd232bbdb6ef14762df2793ad9e866bf5a0013c3a79287ca60737e50a873b7d43ab165ce370c133d8cacb563de4c13ed665635d74cf940ef83b8a0aa4d5b71b0cf9e42fa64ff6643d05c88484795fafcaead4fd9ca234c1df2e8ddd3836a152f9e39f4a702efbfc5b7f2cde421f02d1d575198ea4f2cb9eabd079777e0827b11b154677cd337a9bbc294343fc2fd435cb7e2b24a994e1204b3f61bb31435317f272d28e13bf1aa34166be883c50f26e58d92dd760d1bda5950bd029cb4c5b10ef7bca05c40b247ca872fb434561367e0a7f4afc4f9a0800955cbc3573d47ab93e015447bbe3e55188f68372130b48555ba4342a153ec9f78e98c7b0360d365575ac4f118c278850f3006d66f381ef31f158c57238b375caccb2ab01f72d29cf1e3015ed0443d6268a11d264ea7a9d63a765a6288be8302f9fec8b9702a79a14217117fd5c9d17ed77d27f314ee29eda912968922c5e9f6600d3b907999bc0462debf3a6b80771c41b7a5d0543ab27909cff43067426141187c89f8c84b7b760a37110490c85bcbb543d7a159af5e5fe50911e4ae97674fef103be96abb2302b305c82dad57e6f412ef9cb843b639ebecf391ce96eaa613550adc46cb9cd573c5afeb36cb72a1e4902b6ba1a8de38903e628b6623b085d51bf0817cc1541f3bd5cdb1f0d00"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:30:01 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"])
ioctl$KVM_SET_MSRS(r3, 0x4090ae82, &(0x7f0000000240))

20:30:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xf, 0x32, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f000047d000)='pagemap\x00')
pread64(r1, &(0x7f0000000040)=""/8, 0x8, 0x100000)

[  363.259230] EXT4-fs (sda1): Ignoring removed orlov option
[  363.266717] EXT4-fs (sda1): re-mounted. Opts: orlov,,errors=continue
[  363.279010] jfs: Unrecognized mount option "ö" or missing value
20:30:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0xf, 0x0, 0x0)

20:30:01 executing program 0:
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], 0xfffffff6})

20:30:01 executing program 3:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0), 0x30, &(0x7f0000000140)={[{@orlov='orlov'}]})

20:30:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:30:01 executing program 4:
r0 = socket(0x1e, 0x1000000000005, 0x0)
sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f000016cf61)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0)
recvmsg(r0, &(0x7f0000a97000)={&(0x7f0000a25ff0)=@ax25, 0x10, &(0x7f00000b6000)=[{&(0x7f0000121000)=""/123, 0x7b}], 0x1, &(0x7f0000e08000)=""/248, 0xf8}, 0x0)

20:30:01 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x280d)
setsockopt$inet_tcp_int(r0, 0x6, 0x800000000001e, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback}, 0x10)
close(r0)

[  363.825647] jfs: Unrecognized mount option "ö" or missing value
[  363.838194] EXT4-fs (sda1): Ignoring removed orlov option
[  363.853193] EXT4-fs (sda1): re-mounted. Opts: orlov,,errors=continue
20:30:01 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
io_setup(0x0, &(0x7f0000001a00))
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

20:30:01 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200a5ffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}])

20:30:01 executing program 0:
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], 0xfffffff6})

20:30:01 executing program 3:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0), 0x30, &(0x7f0000000140)={[{@orlov='orlov'}]})

20:30:01 executing program 7:
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)={0x9, 0x20000000001, "eb"}, 0x0)

20:30:01 executing program 4:
unshare(0x40000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000400)={0x0, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}})

20:30:01 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x8}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000080)="dc"}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)}, 0x10)

20:30:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000440)=@fragment, 0x8)
setsockopt$inet6_opts(r1, 0x29, 0x6, &(0x7f0000000080)=@fragment, 0x0)

20:30:01 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x280d)
setsockopt$inet_tcp_int(r0, 0x6, 0x800000000001e, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback}, 0x10)
close(r0)

[  364.075741]  loop2: p1
[  364.078468] loop2: partition table partially beyond EOD, truncated
[  364.114249] loop2: p1 start 1 is beyond EOD, truncated
[  364.148342] jfs: Unrecognized mount option "ö" or missing value
[  364.155182]  loop2: p1
[  364.157789] loop2: partition table partially beyond EOD, truncated
[  364.169526] IPVS: ftp: loaded support on port[0] = 21
[  364.184464] loop2: p1 start 1 is beyond EOD, truncated
[  364.196001] EXT4-fs (sda1): Ignoring removed orlov option
20:30:02 executing program 5:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0), &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff)
keyctl$setperm(0x5, r0, 0x380c0000)
keyctl$get_security(0xb, r0, &(0x7f00000005c0)=""/84, 0x54)

20:30:02 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90)

20:30:02 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc)
getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x3a)
fcntl$setlease(r1, 0x400, 0x1)

[  364.227706] EXT4-fs (sda1): re-mounted. Opts: orlov,,errors=continue
20:30:02 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0xe}})
close(r2)
close(r1)

20:30:02 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x280d)
setsockopt$inet_tcp_int(r0, 0x6, 0x800000000001e, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback}, 0x10)
close(r0)

20:30:02 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040), &(0x7f0000000100)=0x8)

[  364.323937] IPVS: ftp: loaded support on port[0] = 21
20:30:02 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0))
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140))

20:30:02 executing program 3:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140))
close(r1)

20:30:02 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e)

20:30:02 executing program 7:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2b, 0x0, @remote, @local, {[], @udp={0x0, 0x80040206, 0x8}}}}}}, &(0x7f0000000040))

20:30:02 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x3c7, &(0x7f00000036c0)=""/64, 0xffffff88}}], 0x2, 0x0, &(0x7f0000003700)={0x77359400})

20:30:02 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket(0x2000000000010, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
ioctl$sock_ifreq(r0, 0x89ff, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_hwaddr=@link_local})

20:30:02 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x280d)
setsockopt$inet_tcp_int(r0, 0x6, 0x800000000001e, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback}, 0x10)
close(r0)

20:30:02 executing program 6:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x69d, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

20:30:03 executing program 0:
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000440)="0001000000ff000000000000c9030000ec00000001000800000011cc0a56d4a9a75900000020000000010000000000006e5fbe5c0000ffff53ef010003", 0x3d, 0x400}], 0x0, &(0x7f0000000000))

20:30:03 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
kcmp(r1, r1, 0x0, r0, r0)

20:30:03 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
listen(r1, 0x11000000000b)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

20:30:03 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000))
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001240)={0x0, r1})
r2 = dup2(r0, r1)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000140)={0x43}, 0x43)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

20:30:03 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="f219946d9efe08e52cfddcc5cc"], &(0x7f0000000340)=0x1)
ioctl(0xffffffffffffffff, 0x2b45, &(0x7f0000000180)="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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]})

20:30:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000040))

20:30:03 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000c05000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24)

20:30:03 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = gettid()
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f000005b000)=0x3)
fcntl$setown(r4, 0x8, r2)
readv(r5, &(0x7f0000000040)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1)
fcntl$setsig(r4, 0xa, 0x12)
dup2(r4, r5)
tkill(r2, 0x16)

[  365.335769] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  365.343408] EXT4-fs (loop0): Invalid log block size: 3423666176
20:30:03 executing program 7:
syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0)

20:30:03 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a00000ce600001000e0c90002000000000000000000000000000000f0ffffff000b40000041"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)

20:30:03 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000))
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001240)={0x0, r1})
r2 = dup2(r0, r1)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000140)={0x43}, 0x43)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

20:30:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x41}})
close(r2)
close(r1)

20:30:03 executing program 0:
r0 = socket$inet6(0xa, 0x400000001, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe)
fchownat(r1, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000)

[  365.426342] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  365.434154] EXT4-fs (loop0): Invalid log block size: 3423666176
20:30:03 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000c05000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24)

20:30:03 executing program 7:
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000)

20:30:03 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a00000ce600001000e0c90002000000000000000000000000000000f0ffffff000b40000041"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)

20:30:03 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000))
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001240)={0x0, r1})
r2 = dup2(r0, r1)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000140)={0x43}, 0x43)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

20:30:03 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000c05000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24)

20:30:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0)

20:30:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000040))

20:30:03 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)
socket$pppoe(0x18, 0x1, 0x0)
io_setup(0x8, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0}])

20:30:03 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a00000ce600001000e0c90002000000000000000000000000000000f0ffffff000b40000041"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)

20:30:03 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000c05000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24)

[  365.833042] atomic_op 0000000095481011 conn xmit_atomic           (null)
[  365.842457] atomic_op 000000007d3c49c7 conn xmit_atomic           (null)
20:30:04 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = gettid()
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f000005b000)=0x3)
fcntl$setown(r4, 0x8, r2)
readv(r5, &(0x7f0000000040)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1)
fcntl$setsig(r4, 0xa, 0x12)
dup2(r4, r5)
tkill(r2, 0x16)

20:30:04 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000))
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001240)={0x0, r1})
r2 = dup2(r0, r1)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000140)={0x43}, 0x43)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

20:30:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x80000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x74}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14)

20:30:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000040))

20:30:04 executing program 7:
r0 = socket(0x1e, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80)
r2 = socket(0x1e, 0x5, 0x0)
sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001400), 0x0, &(0x7f00002d4000)}, 0x0)

20:30:04 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000000013002d54036205001a00000ce600001000e0c90002000000000000000000000000000000f0ffffff000b40000041"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)

20:30:04 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4)
getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0)

20:30:04 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f000000a3c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007d80), 0x0, &(0x7f0000007dc0)}}, {{&(0x7f0000008f40)=@nfc, 0x80, &(0x7f000000a280), 0x2ec, &(0x7f000000a300)}, 0x2}], 0x2, 0x0)

20:30:04 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000))

20:30:04 executing program 7:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000000)="1f0000000104fffffd3b000007110000f30501000b000100050423ca0000cf", 0x1f)

20:30:04 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[])
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000140)={0x20000000000001ea})

20:30:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
timer_create(0xfffffffffffffffc, &(0x7f0000000400)={0x0, 0x8, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, r1+30000000}}, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000))

20:30:04 executing program 4:
rt_sigpending(&(0x7f0000dbfff8), 0xfffffffffffffda3)

20:30:04 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000040), 0x4)
clock_adjtime(0x0, &(0x7f0000000c80))
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080))

20:30:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4004ae8b, &(0x7f0000000040))

20:30:04 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0), 0x100000637)

[  366.955350] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'.
[  366.978631] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'.
[  366.993342] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  367.028585] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
20:30:05 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = gettid()
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f000005b000)=0x3)
fcntl$setown(r4, 0x8, r2)
readv(r5, &(0x7f0000000040)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1)
fcntl$setsig(r4, 0xa, 0x12)
dup2(r4, r5)
tkill(r2, 0x16)

20:30:05 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xfffffffeffffff7f)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f"], 0x1)
sendto$inet6(r1, &(0x7f0000000000)="a7", 0x1, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)

20:30:05 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newae={0x64, 0x1e, 0xd01, 0x0, 0x0, {{@in=@rand_addr}, @in=@multicast2}, [@lifetime_val={0x24}]}, 0x64}}, 0x0)

20:30:05 executing program 7:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x4207, r1)
ptrace$cont(0x20, r1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/212, 0xd4}}], 0x40000000000012f, 0x0, &(0x7f0000000e40)={0x77359400})

20:30:05 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x19)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8010000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0x1, 0x0, &(0x7f0000000400), 0x1029)

20:30:05 executing program 2:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, &(0x7f0000000080), 0x30, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb'}}]})

20:30:05 executing program 1:
capset(&(0x7f0000000700)={0x20071026}, &(0x7f0000000740))
prctl$intptr(0x1c, 0x0)

20:30:05 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80001, 0x0)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="a82524538c057a33", 0x8}, {&(0x7f0000000380)}, {&(0x7f0000000640)="3113d555", 0x4}], 0x3)

20:30:05 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000))

20:30:05 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl(r0, 0xc0884113, &(0x7f00000000c0))

20:30:05 executing program 7:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})

20:30:05 executing program 5:
fanotify_init(0x296382a9b6d16951, 0x0)

20:30:05 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = userfaultfd(0x0)
r2 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000})

20:30:05 executing program 2:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, &(0x7f0000000080), 0x30, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb'}}]})

20:30:05 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000100)=<r1=>0x0)
close(r0)
socket$vsock_stream(0x28, 0x1, 0x0)
io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0xf000000}])

20:30:06 executing program 1:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086604, &(0x7f00000001c0))

[  368.293582] EXT4-fs: 2 callbacks suppressed
[  368.293593] EXT4-fs (sda1): re-mounted. Opts: max_dir_size_kb=0x0000000000000000,,errors=continue
20:30:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)

20:30:06 executing program 6:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = gettid()
syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000e18ff8)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f000005b000)=0x3)
fcntl$setown(r4, 0x8, r2)
readv(r5, &(0x7f0000000040)=[{&(0x7f0000fb6f9c)=""/25, 0x19}], 0x1)
fcntl$setsig(r4, 0xa, 0x12)
dup2(r4, r5)
tkill(r2, 0x16)

20:30:06 executing program 7:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58)
close(r0)

20:30:06 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140), 0x0)

20:30:06 executing program 2:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, &(0x7f0000000080), 0x30, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb'}}]})

20:30:06 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl(r0, 0xc0884113, &(0x7f00000000c0))

20:30:06 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00')
fallocate(r1, 0x0, 0x3, 0x8000)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe)

20:30:06 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14}, 0xff76}}, 0x0)

20:30:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000300)=[@dead_binder_done, @release], 0x0, 0x0, &(0x7f0000000040)})

20:30:07 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl(r0, 0xc0884113, &(0x7f00000000c0))

[  369.146963] EXT4-fs (sda1): re-mounted. Opts: max_dir_size_kb=0x0000000000000000,,errors=continue
20:30:07 executing program 7:
r0 = socket(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240))

20:30:07 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000002b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000008000000000000"], 0x50)
recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0x20001791}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0)

20:30:07 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40505412)

20:30:07 executing program 2:
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[])
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x0, &(0x7f0000000080), 0x30, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb'}}]})

20:30:07 executing program 5:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
truncate(&(0x7f0000000300)='./bus\x00', 0xa00)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe)
truncate(&(0x7f0000000140)='./bus\x00', 0x0)

20:30:07 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl(r0, 0xc0884113, &(0x7f00000000c0))

20:30:07 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f00000004c0)=""/97, &(0x7f0000000040)=""/127})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[])
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000280)=""/185})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64])

[  369.371182] binder: 25408:25416 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  369.378737] binder: 25408:25416 Release 1 refcount change on invalid ref 0 ret -22
[  369.492287] EXT4-fs (sda1): re-mounted. Opts: max_dir_size_kb=0x0000000000000000,,errors=continue
20:30:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_msfilter(r1, 0x0, 0x18, &(0x7f0000000180)={@rand_addr, @dev}, 0x10)

20:30:08 executing program 7:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001140)='cpuacct.usage_user\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
futex(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)

20:30:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d245f8f762070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x7, 0x40, 0x0, 0x81}}}, 0x128)

20:30:08 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x42)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000b00)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f00000008c0)}, &(0x7f0000000980)="3e35d6cadbe5", &(0x7f0000000a80)=""/55, 0x0, 0x0, 0x0, &(0x7f0000000ac0)})

20:30:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x2ff]})

20:30:08 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x28042, 0x0)
fallocate(r2, 0x0, 0x0, 0x73e0)
sendfile(r1, r2, &(0x7f00007ed000), 0x7f)

20:30:08 executing program 6:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x40096102, &(0x7f0000000300)={{0x2, 0x0, @remote, [0xfe, 0x60000000]}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}})

20:30:08 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4)
sendto$inet6(r0, &(0x7f00000000c0), 0xfffffffffffffceb, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000737000), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000)

20:30:08 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)

20:30:08 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000f61000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
semget(0x1, 0x2, 0x0)
semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000080)=""/52)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c)
tee(r1, r0, 0x2, 0x0)
dup2(r1, r3)

20:30:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32=0xfffffffffffff000}]}]}, 0x20}}, 0x0)

20:30:08 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)

20:30:08 executing program 3:
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYPTR64, @ANYRES32, @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="0000000000000000000000000000bf6a2b64b9ab4a4a8d5fb0bdd0e85af48c17ccfc0f83a3681cb1358f7a832b57acd4768e1baad1ee45e23bd9cd6f059c774e4a131d74837319a83a701068c0a4d2be6e7b10b98d1a0b6dcc9675e5f4a1556ac32096eeae67d985df2ca5ad618e1c01707e4400321efb43d1ce504fccad582f89de"]], 0x1}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:30:08 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
socket$kcm(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x1}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10)

20:30:08 executing program 6:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x40096102, &(0x7f0000000300)={{0x2, 0x0, @remote, [0xfe, 0x60000000]}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}})

[  370.534615] syz-executor5 (25437) used greatest stack depth: 12560 bytes left
20:30:08 executing program 7:
r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/28, 0x1c)
syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x40000000080}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x4010800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1})
r1 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'client0\x00', 0x0, "f911a660cb4171a7", "77e810b459606a77469698735f8a4f77438e722927d6f37611d0e8b4269923b0"})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0)

20:30:08 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0)

20:30:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x76, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c)

20:30:08 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x5, 0x4)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet6(0xa, 0x1000000000003, 0x100000003)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x20}, 0xc)
write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000)
write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf)
r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)=0x5, 0x4)
close(r3)

20:30:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
symlink(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000000)='./file1\x00')
quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000))

20:30:08 executing program 6:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x40096102, &(0x7f0000000300)={{0x2, 0x0, @remote, [0xfe, 0x60000000]}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}})

20:30:08 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4)

20:30:08 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00')
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070")
preadv(r0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/224, 0xe0}, {&(0x7f00000016c0)=""/254, 0xfe}], 0x2, 0x0)

20:30:08 executing program 6:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x40096102, &(0x7f0000000300)={{0x2, 0x0, @remote, [0xfe, 0x60000000]}, {0x0, @local}, 0x0, {0x2, 0x0, @loopback}})

20:30:08 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
unshare(0x40000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':eth1\x00'}]}, 0x34}}, 0x0)

[  370.915801] IPVS: ftp: loaded support on port[0] = 21
[  370.970711] IPVS: ftp: loaded support on port[0] = 21
20:30:09 executing program 6:
r0 = socket$inet6(0xa, 0x200000003, 0x8)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000100)=<r2=>0x0)
io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400})
close(r1)
socket$inet(0x2, 0x3, 0x5)
io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x700000000000}])

20:30:09 executing program 1:
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
ioctl$int_out(r0, 0x2000000040045731, &(0x7f0000000000))

20:30:09 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:30:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
symlink(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000000)='./file1\x00')
quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000))

20:30:09 executing program 5:
futex(&(0x7f000000cffc)=0x1, 0x8, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0)

20:30:09 executing program 0:
r0 = eventfd(0x80000001)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r2 = timerfd_create(0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1)
write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8)
read$eventfd(r0, &(0x7f0000000000), 0x8)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

20:30:09 executing program 7:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000f90)=[{&(0x7f0000000fc5)=""/1, 0x1}], 0x1, &(0x7f0000003000)=[{&(0x7f0000003fff)=""/2, 0x2}], 0x1, 0x0)

20:30:09 executing program 4:
unshare(0x40600)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$bt_hci(r1, 0x65, 0x2, &(0x7f0000000280)=""/244, &(0x7f0000000140)=0xf4)

20:30:09 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070")
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x22, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000480)=0x1e)

20:30:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
symlink(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000000)='./file1\x00')
quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000))

20:30:09 executing program 6:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000004c0)=""/156, &(0x7f0000000040)=0x9c)

20:30:09 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r2, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)

20:30:09 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getcwd(&(0x7f0000000280)=""/4096, 0x1000)

20:30:09 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
symlink(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000000)='./file1\x00')
quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000))

20:30:09 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
name_to_handle_at(r0, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400)

20:30:09 executing program 4:
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x8000, &(0x7f00000006c0))

20:30:09 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000002240)={0x1, [<r2=>0x0]}, &(0x7f0000003a40)=0x8)
unshare(0x24020400)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={<r3=>r2}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x11, &(0x7f0000000300)={r3}, &(0x7f0000000400)=0x8)

20:30:09 executing program 5:
rmdir(&(0x7f0000000080)='.\x00')

20:30:09 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000080), 0xc, &(0x7f0000002740)={&(0x7f0000000240)=ANY=[]}}, 0x0)
sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x78}}], 0x4000000000002ed, 0x0)

20:30:09 executing program 7:
mlockall(0x1)
migrate_pages(0x0, 0x67, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x7)

20:30:10 executing program 0:
r0 = eventfd(0x80000001)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r2 = timerfd_create(0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1)
write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8)
read$eventfd(r0, &(0x7f0000000000), 0x8)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

20:30:10 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x81007702, &(0x7f0000000300)="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")

20:30:10 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, &(0x7f0000000080))

20:30:10 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x80401, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000100)='./file0/F.le0\x00', 0x0)

20:30:10 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0)
lseek(r0, 0x7ffffffffffffffb, 0x0)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/250, 0xfa}], 0x1)

20:30:10 executing program 6:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4)

20:30:10 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x73, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c)

20:30:10 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})
ioctl$TCSETSF(r0, 0x5457, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb106})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x6, 0x0, 0x8})

20:30:10 executing program 6:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast, [], 0x128, 0x128, 0x170, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [], @local}}}}, @quota={'quota\x00', 0x18}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"95065deba0aee3e4d2418cbb0187f2074e0349954b022b1f67521d0ef3c3"}}}]}]}, 0x278)

20:30:10 executing program 7:
r0 = socket$inet6(0xa, 0x3, 0x1)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x96, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)

20:30:10 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x80401, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000100)='./file0/F.le0\x00', 0x0)

20:30:10 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, &(0x7f0000000080))

[  372.552987] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  372.660631] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  372.860241] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  372.948957] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
20:30:11 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, &(0x7f0000000080))

20:30:11 executing program 7:
timer_create(0x39318d163eb6390a, &(0x7f000083dfa8)={0x0, 0x0, 0x0, @thr={&(0x7f0000bc6f28), &(0x7f0000490000)}}, &(0x7f0000c3affc))

20:30:11 executing program 6:
r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/202)

20:30:11 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x13, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, 0xe8)

20:30:11 executing program 0:
r0 = eventfd(0x80000001)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r2 = timerfd_create(0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1)
write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8)
read$eventfd(r0, &(0x7f0000000000), 0x8)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

20:30:11 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x80401, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000100)='./file0/F.le0\x00', 0x0)

20:30:11 executing program 2:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fallocate(r0, 0x3, 0x0, 0x5)
symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00')
fallocate(r1, 0x0, 0x0, 0x3)
lseek(r1, 0x0, 0x3)

20:30:11 executing program 7:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2)
read(r1, &(0x7f0000fb6000)=""/28, 0x56f)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf})
write$sndseq(r1, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)

20:30:11 executing program 6:
r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/202)

20:30:11 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, &(0x7f0000000080))

20:30:11 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59")
ioctl$SG_GET_NUM_WAITING(r1, 0x80087601, &(0x7f0000000000))

[  373.723537] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
20:30:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = fanotify_init(0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000800)="b888008ec8660f3a1685f6ff123e0f01d1260fc7183efff70f01c80f320f18d90f20196766c7442400420000006766c7442402ea4635856766c744240600000000670f011c24", 0x46}], 0xaaaaaf5, 0x0, &(0x7f00000008c0), 0x0)

20:30:11 executing program 6:
r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/202)

20:30:11 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x80401, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000100)='./file0/F.le0\x00', 0x0)

20:30:11 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59")
ioctl$SG_GET_NUM_WAITING(r1, 0x80087601, &(0x7f0000000000))

20:30:11 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})
ioctl$TCSETSF(r0, 0x5457, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb106})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x6, 0x0, 0x8})

[  373.814328] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
20:30:11 executing program 6:
r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/202)

20:30:11 executing program 2:
syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESOCT])
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0))

[  373.998980] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
20:30:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)}, 0x0)
recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x0, 0x0)

20:30:11 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59")
ioctl$SG_GET_NUM_WAITING(r1, 0x80087601, &(0x7f0000000000))

[  374.093225] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
20:30:12 executing program 0:
r0 = eventfd(0x80000001)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0)
r2 = timerfd_create(0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000980)=""/230, 0xe6}], 0x1)
write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8)
read$eventfd(r0, &(0x7f0000000000), 0x8)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

20:30:12 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000040)=0x24)

20:30:12 executing program 6:
socket$inet6(0xa, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280))
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x1000007ffe)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0xfffffffffffffffd, 0xfffffffffffffbff}, 0x8)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0)
sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0)
close(r1)
close(r2)

20:30:12 executing program 2:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f00000013c0)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc060004000000d588", 0x24)

20:30:12 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59")
ioctl$SG_GET_NUM_WAITING(r1, 0x80087601, &(0x7f0000000000))

20:30:12 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00000000000000ffff7f00", 0x2003})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r2, r0)

20:30:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)

20:30:12 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @remote}})

20:30:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f00000002c0), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x0, 0xabc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff80, 0x0, 0x0, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  374.848542] netlink: 'syz-executor2': attribute type 4 has an invalid length.
[  374.858045] netlink: 'syz-executor2': attribute type 4 has an invalid length.
20:30:12 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3, 0x43, 0x0)
get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0xaea, &(0x7f0000fff000/0x1000)=nil, 0x2)

[  374.916763] device lo left promiscuous mode
20:30:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})
ioctl$TCSETSF(r0, 0x5457, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb106})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x6, 0x0, 0x8})

20:30:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)

[  374.941068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  374.949068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  374.978460] dccp_flush_write_queue: CCID did not manage to send all packets
20:30:12 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100))
r1 = gettid()
clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180))
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
tkill(r1, 0x1000000000014)

20:30:13 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @remote}})

20:30:13 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0xfffffffffffffffe]})

20:30:13 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00000000000000ffff7f00", 0x2003})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r2, r0)

[  375.168082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  375.482435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:30:13 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @remote}})

20:30:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)

20:30:13 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$EVIOCGABS0(r1, 0x40044590, &(0x7f00000004c0)=""/240)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0))
close(r0)

20:30:13 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0xfffffffffffffffe]})

20:30:13 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={<r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)

20:30:13 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00000000000000ffff7f00", 0x2003})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r2, r0)

20:30:13 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @broadcast}, 0x0, {0x2, 0x0, @remote}})

20:30:13 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0xfffffffffffffffe]})

20:30:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})
ioctl$TCSETSF(r0, 0x5457, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xb106})
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x6, 0x0, 0x8})

20:30:13 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mmap(&(0x7f0000000000/0xaa1000)=nil, 0xaa1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008)

20:30:14 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
unshare(0x40000000)
r1 = socket(0x11, 0x100000803, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0xa205})

20:30:14 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0xfffffffffffffffe]})

[  376.300562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:30:14 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070")
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x15c)

20:30:14 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000))

20:30:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d179f20600000000001c14b1048c5b1bd2e7fcd3304f1c64b8614fcff9671a5cf54ab025", 0x24)
r1 = accept$alg(r0, 0x0, 0x0)
writev(r1, &(0x7f0000000780)=[{&(0x7f0000000800)="deb52eff026d43cd0fc56ca38d7f5386", 0x10}], 0x1)
recvmmsg(r1, &(0x7f0000004b80)=[{{&(0x7f0000001880)=@nfc, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000001900)=""/114, 0x72}}, {{&(0x7f0000004740)=@can, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004a40)=""/185, 0xb9}], 0x1}}], 0x2, 0x0, &(0x7f0000004dc0)={0x77359400})

20:30:14 executing program 1:
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0)

20:30:14 executing program 7:
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x4000040, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmsg(r0, &(0x7f000001b000)={0x0, 0xfffffff5, &(0x7f0000019fa0), 0x1f2, &(0x7f000001ef08)}, 0x0)
recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=""/89, 0x59}, 0x40002042)

20:30:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[  376.979472] IPVS: ftp: loaded support on port[0] = 21
20:30:14 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$EVIOCGABS0(r1, 0x40044590, &(0x7f00000004c0)=""/240)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0))
close(r0)

20:30:14 executing program 7:
unshare(0x2000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x9, &(0x7f0000000080)={0x13, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x2c)

20:30:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000580)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000002d00)=@sco, 0x80, &(0x7f0000004080)=[{&(0x7f0000002e80)="70cc8d141c4cfc85d26d54e814cb312699b42eaa355180030bf9436c0196c317f919d71fc410a33c049505c4499dde677e0c8465502fbd9cc361aeed6adddb1a6bab5c9ff8fe19cdbbdf86b54e672f1f04fd1ea6b79ed5d35e54b7193a92b3d38a612f71887295d13daf02abcd8d472dbdf2b6004320d4ba71b7f494c0f205db975e1e5887c2921494a619b96da08cb12223bab6174940202f688ba56b214f2d462c456878fe2dba9a213e5f035be4c9db4ee18799a1f7b3429a35fc5b5340bc08a5b6ced8dbaa54e7f6c4c51c2786e13ad72d79ee70cfbb54b00c7f7a1e50f1b478eafb54007ff1e5f07490efa98fe5f8910493827458c7986914d7199c41463c6274f25fd01d06dc2941c06f509cbba2acda2e92283401928190e1b40465353fc32893b25f4ae91ed70e6750f61499eca5c780e6e985ba241f554b42862f31157064fb0a6bcba1ad3cfbf372491a67db4d38eb5b23a634af9206a4aaf7df4e175f9b409b65074d5dad04a6622e2a839b92b29377f65e82fdfa2e632658c08310e07ddb02306522ab4508f1282c244808974ffb0964ec2cad227e6227ca17c1ec5972132d58dd7e932b881f9885a4d277f484ce44d0be8093b626f6ca3556c3aaf2b4cbe685f62bfc9bda86ae77d567f8b97accd02055bc51e6d920f75efa146795a8670d6e84cf70b9c193fb627d23e170cf6bacb1bb8bfddc1e9e856e5f8989dd89154137ef3e330ae63c370c68c1371d6fd6cbe5bde29c9b054fc53c5bb0b2b20cb820938b08a94d6f68232dfaad399b5d3e2dbf76e0d2113690b3af362415bc121eff92ca6f5e975f114157cbdf59ad11aa8c9b6e7ac4e77225dbc1858b346862543758a978a1037b1b70db1d79034509d0921b681247a01a053c2645249d73b177a41a33631702bf770004c03e909546cd0bbfcd2883593273cf04478ff3653748f92231a70c34d7cdca57ea1cbe0bff29b1032b3bd34b44c3b14b582e33a7660d41daa1fc309662f383116313b660f3f8ebba4067e3f0309b78b4536dc51611018e6335e9626b9f47c1840f1c38214cbfb14d8fb338fc5e2db44a8fc45026d8476ad96b55ac3c3b21fa69373bd76b6422b738ea31d86906419077c87167edeb48b1753aa4d8616121774b1d9688e02cfa28ef4fe0b9b6cde986741eaf252397b23eadb05bd146a1253943952eb6194f9492585963d9726f79ae839d0842ce9f717aa9a24ba306a7e175777d27370f97f57d6c593bfa32e5301fd5105d3c2bd9bb30dd0587ea55086afb51c031c964f398602ad458826d4e01fd2f36d5aef4915038d6617b657f4da5bce96b23dd2c50926ca057e13a13d881c4a9a5017b5a4c9a8fb95089e8d8f1a7f1dbcff4c1e53add03a05c9ff65ff9884c449573f3333bf52851ddebacebe258c89cfc5b0515111b667b90e30ce1cdc611d945fc75aa357a188ecc22dec01bf6b3581c07b9d4f41d17285a", 0x417}], 0x1, 0x0, 0x0, 0x40010}, 0x8}, {{&(0x7f0000004100)=@l2={0x1f, 0x954c, {0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xffff}, 0x1000, 0x80}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004180)="e79810a0c0f4d0121189", 0xa}, {&(0x7f0000004380)="2bc8951f99497e922a3d488bff52a804", 0x10}], 0x2, &(0x7f00000045c0)=[{0xa8, 0x11f, 0x8, "8d44f1f6ef1c9d8244c2791a0b6dd56e641c688ccebfd6cb7489a6d22d2942b1fc57d6456e0499d96c2016a200a06e1ea3cc2586343b8614a903160b3cec3b18b971540d24b96d431200f0f7b60eb8f82f5760459daa46ed37784f3ccbebd3f5f1ba8196a3cc47d922005e63c1e0f44775e06cd1d55b632cbd5b44fd8818ad4d29ef17189d557a8024c2dbe48afcfd65b8d7c2"}, {0x90, 0x10c, 0x5, "f0a2b162bf99adfbfd410c43731729dd30f12037b7d6abd35f5272447d615d9e0a5da27cbb5749f3759deeda45be22e5160fac9f1297822fbda5d88ee029cd3ac7ba6f1fc0eaa203138665b213ef6769ae52ec09e84e08bbcfdaec83ffc8afded5aa7bb775b4cc571d3bd534e91c29c9dda9deaa9b8afe0c0f"}], 0x138, 0xba1cf660b697d4c3}, 0x3ff}], 0x2, 0x800)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f0000000240)="8e", 0x1, 0x0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10)

20:30:14 executing program 1:
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001)

20:30:14 executing program 6:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x1ff, 0x4)
syz_emit_ethernet(0xf8, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f00000002c0))

20:30:14 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00000000000000ffff7f00", 0x2003})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup2(r2, r0)

[  377.088449] IPVS: ftp: loaded support on port[0] = 21
[  377.216600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:30:15 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc1105511, &(0x7f0000000180)=ANY=[])

20:30:15 executing program 7:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')
link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00')
unlink(&(0x7f0000000240)='./file0/file0\x00')

20:30:15 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
unshare(0x40000000)
r1 = socket(0x11, 0x100000803, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0xa205})

20:30:15 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070")
syz_mount_image$ntfs(&(0x7f00000009c0)='ntfs\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, &(0x7f0000004d40), 0x0, &(0x7f0000004e40)={[{@nls={'nls', 0x3d, 'none'}}]})

20:30:15 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r1, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
connect(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80)
sendmmsg(r1, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000000)=[{0x18, 0x11a, 0x1, '}'}], 0x18}}], 0x1, 0x0)
close(r1)

20:30:15 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f000009aff8)='./file0\x00', 0x0)
mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0)
unlink(&(0x7f00003b3000)='./file0\x00')

20:30:15 executing program 6:
syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e77691e75652c73684d77657865632c757365667265652c636865636b3d737472696374"])
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
creat(&(0x7f0000000880)='./file0/file0\x00', 0x0)

20:30:15 executing program 7:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')
link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00')
unlink(&(0x7f0000000240)='./file0/file0\x00')

20:30:15 executing program 1:
syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={[{@swalloc='swalloc'}]})

[  378.074540] FAT-fs (loop6): Unrecognized mount option "allow_utime=" or missing value
[  378.074548] ntfs: (device loop3): parse_options(): NLS character set none not found.
20:30:15 executing program 7:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')
link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00')
unlink(&(0x7f0000000240)='./file0/file0\x00')

20:30:15 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$EVIOCGABS0(r1, 0x40044590, &(0x7f00000004c0)=""/240)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0))
close(r0)

20:30:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[])
r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0)
truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000)
fcntl$setstatus(r0, 0x4, 0x6c00)
fadvise64(r0, 0x0, 0x0, 0x4)
pread64(r0, &(0x7f0000000100)=""/255, 0xff, 0x0)

20:30:15 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x2276, 0x0)

[  378.130954] ntfs: (device loop3): parse_options(): NLS character set none not found.
[  378.159701] XFS (loop1): Invalid superblock magic number
20:30:16 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_pts(r0, 0x0)
dup2(r4, r0)

20:30:16 executing program 3:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000180)={0x0, 0x4, [0x0, 0x474]})

[  378.193634] IPVS: ftp: loaded support on port[0] = 21
20:30:16 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480))
read$FUSE(r0, &(0x7f0000001000), 0x1000)
read$FUSE(r0, &(0x7f00000020c0), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
write$FUSE_DIRENT(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="90000000000000000200000000000000820000000000000000000000000000000b00000000000000656d316e6f646576656d3100000000000000000000000000000100000000000001000000000000002c00000002000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f75702463670000757015000000cdf8c919c98623ae0b331c00edf424ccb0d3ce95dc21dde16988fd5a7481a0e3ff79be1cc07a36465f9e175056f8df33962c32f370b50440902dbab36087e79fa24e11cb72b7fe6ab5d9caa9abe4cb5229ce1919c18bac1fd24679bee4"], 0xec)

[  378.238533] XFS (loop1): Invalid superblock magic number
20:30:16 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
unshare(0x40000000)
r1 = socket(0x11, 0x100000803, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0xa205})

[  378.340029] FAT-fs (loop4): Directory bread(block 2) failed
[  378.346530] FAT-fs (loop4): Directory bread(block 3) failed
[  378.368125] FAT-fs (loop4): Directory bread(block 4) failed
[  378.375216] FAT-fs (loop4): Directory bread(block 5) failed
[  378.381314] FAT-fs (loop4): Directory bread(block 6) failed
20:30:16 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0), 0x3)

[  378.387490] FAT-fs (loop4): Directory bread(block 7) failed
[  378.393522] FAT-fs (loop4): Directory bread(block 8) failed
[  378.408283] FAT-fs (loop4): Directory bread(block 9) failed
[  378.414156] FAT-fs (loop4): Directory bread(block 10) failed
[  378.421093] FAT-fs (loop4): Directory bread(block 11) failed
20:30:16 executing program 7:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00')
link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00')
unlink(&(0x7f0000000240)='./file0/file0\x00')

20:30:16 executing program 3:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

20:30:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[])
r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0)
truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000)
fcntl$setstatus(r0, 0x4, 0x6c00)
fadvise64(r0, 0x0, 0x0, 0x4)
pread64(r0, &(0x7f0000000100)=""/255, 0xff, 0x0)

[  378.445278] attempt to access beyond end of device
[  378.450326] loop4: rw=1, want=73, limit=2
20:30:16 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_pts(r0, 0x0)
dup2(r4, r0)

[  378.581356] IPVS: ftp: loaded support on port[0] = 21
20:30:16 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0x90)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

20:30:16 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4)
mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}})
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1004000000016)
close(r0)

20:30:16 executing program 7:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f000006c000)={0x10, 0x0, 0xffffffffffffffff}, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0000}, 0xc)
bind$netlink(r0, &(0x7f0000d86000)={0x10, 0x0, 0xffffffffffffffff}, 0xc)

20:30:16 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_pts(r0, 0x0)
dup2(r4, r0)

[  378.742391] FAT-fs (loop4): Directory bread(block 2) failed
[  378.759223] FAT-fs (loop4): Directory bread(block 3) failed
[  378.774572] FAT-fs (loop4): Directory bread(block 4) failed
[  378.788417] FAT-fs (loop4): Directory bread(block 5) failed
[  378.800527] FAT-fs (loop4): Directory bread(block 6) failed
[  378.819960] FAT-fs (loop4): Directory bread(block 7) failed
[  378.835144] FAT-fs (loop4): Directory bread(block 8) failed
[  378.841692] FAT-fs (loop4): Directory bread(block 9) failed
[  378.847657] FAT-fs (loop4): Directory bread(block 10) failed
[  378.853693] FAT-fs (loop4): Directory bread(block 11) failed
[  378.894687] attempt to access beyond end of device
[  378.899999] loop4: rw=1, want=73, limit=2
20:30:17 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000))
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$EVIOCGABS0(r1, 0x40044590, &(0x7f00000004c0)=""/240)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0))
close(r0)

20:30:17 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
unshare(0x40000000)
r1 = socket(0x11, 0x100000803, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0xa205})

20:30:17 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1000000008912, &(0x7f0000000280)="024a903d6d345f8f762070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x2, 0x0, @loopback}, 0x1c)

20:30:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[])
r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0)
truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000)
fcntl$setstatus(r0, 0x4, 0x6c00)
fadvise64(r0, 0x0, 0x0, 0x4)
pread64(r0, &(0x7f0000000100)=""/255, 0xff, 0x0)

20:30:17 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[])
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'})
ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000140)={0x18ea446a6fa39546})

[  379.292349] IPVS: ftp: loaded support on port[0] = 21
[  379.326250] FAT-fs (loop4): Directory bread(block 2) failed
[  379.326612] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  379.341300] FAT-fs (loop4): Directory bread(block 3) failed
[  379.352725] FAT-fs (loop4): Directory bread(block 4) failed
[  379.372248] FAT-fs (loop4): Directory bread(block 5) failed
[  379.387728] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  379.401474] FAT-fs (loop4): Directory bread(block 6) failed
[  379.407668] FAT-fs (loop4): Directory bread(block 7) failed
[  379.414350] FAT-fs (loop4): Directory bread(block 8) failed
[  379.420955] FAT-fs (loop4): Directory bread(block 9) failed
[  379.426903] FAT-fs (loop4): Directory bread(block 10) failed
[  379.447415] FAT-fs (loop4): Directory bread(block 11) failed
[  379.504472] attempt to access beyond end of device
[  379.509532] loop4: rw=1, want=73, limit=2
20:30:17 executing program 5:
r0 = socket(0x20000000000000a, 0x2, 0x0)
connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a)

20:30:17 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r4 = syz_open_pts(r0, 0x0)
dup2(r4, r0)

20:30:17 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[])
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'})
ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000140)={0x18ea446a6fa39546})

20:30:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000000)=ANY=[])
r0 = open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0)
truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x10000)
fcntl$setstatus(r0, 0x4, 0x6c00)
fadvise64(r0, 0x0, 0x0, 0x4)
pread64(r0, &(0x7f0000000100)=""/255, 0xff, 0x0)

20:30:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000100), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="4ae30000000000000200000001000080020000004000000000b1ee00000001000000080000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000008ac0000000000000000ff0700"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

20:30:17 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x5, 0x4)

20:30:17 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
mbind(&(0x7f000014b000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x3, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000})

20:30:17 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8000000000000008, &(0x7f0000000040), 0x0)

[  379.793954] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
[  379.815762] FAT-fs (loop4): Directory bread(block 2) failed
[  379.839666] FAT-fs (loop4): Directory bread(block 3) failed
[  379.846999] ==================================================================
[  379.854408] BUG: KASAN: use-after-free in rfcomm_dlc_exists+0x1be/0x1f0
[  379.861187] Read of size 1 at addr ffff8801d2c1b484 by task syz-executor7/26132
[  379.868631] 
[  379.868944] FAT-fs (loop4): Directory bread(block 4) failed
[  379.870277] CPU: 0 PID: 26132 Comm: syz-executor7 Not tainted 4.18.0-rc5-next-20180720+ #12
[  379.870286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  379.870291] Call Trace:
[  379.870314]  dump_stack+0x1c9/0x2b4
[  379.870331]  ? dump_stack_print_info.cold.2+0x52/0x52
[  379.870349]  ? printk+0xa7/0xcf
[  379.876752] FAT-fs (loop4): Directory bread(block 5) failed
[  379.884587]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  379.884607]  ? rfcomm_dlc_exists+0x1be/0x1f0
[  379.884623]  print_address_description+0x6c/0x20b
[  379.884644]  ? rfcomm_dlc_exists+0x1be/0x1f0
[  379.894160] FAT-fs (loop4): Directory bread(block 6) failed
[  379.896598]  kasan_report.cold.7+0x242/0x30d
20:30:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2285, 0x80fd01)

[  379.896617]  __asan_report_load1_noabort+0x14/0x20
[  379.896629]  rfcomm_dlc_exists+0x1be/0x1f0
[  379.896643]  rfcomm_dev_ioctl+0x105e/0x2240
[  379.896660]  ? rfcomm_dev_state_change+0x150/0x150
[  379.900425] FAT-fs (loop4): Directory bread(block 7) failed
[  379.905475]  ? lock_release+0xa30/0xa30
[  379.905490]  ? kasan_check_read+0x11/0x20
[  379.905504]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  379.905520]  ? kasan_check_write+0x14/0x20
[  379.908962] FAT-fs (loop4): Directory bread(block 8) failed
[  379.914491]  ? lock_sock_nested+0x9f/0x120
[  379.914506]  ? trace_hardirqs_on+0xd/0x10
[  379.914518]  ? __local_bh_enable_ip+0x161/0x230
[  379.914534]  rfcomm_sock_ioctl+0x89/0xb0
[  379.914549]  sock_do_ioctl+0xe4/0x3e0
[  379.919389] FAT-fs (loop4): Directory bread(block 9) failed
[  379.923693]  ? __fget+0x4ac/0x740
[  379.923708]  ? compat_ifr_data_ioctl+0x170/0x170
[  379.923724]  ? lock_release+0xa30/0xa30
[  379.923742]  ? __schedule+0x884/0x1ea0
[  379.928671] FAT-fs (loop4): Directory bread(block 10) failed
[  379.932978]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  379.932993]  sock_ioctl+0x30d/0x680
[  379.933005]  ? dlci_ioctl_set+0x40/0x40
[  379.933019]  ? ksys_dup3+0x690/0x690
[  379.938806] FAT-fs (loop4): Directory bread(block 11) failed
[  379.943112]  ? errseq_sample+0xe5/0x130
[  379.943128]  ? __fd_install+0x2db/0x880
[  379.943142]  ? dlci_ioctl_set+0x40/0x40
[  379.943159]  do_vfs_ioctl+0x1de/0x1720
[  379.980635] attempt to access beyond end of device
[  379.984173]  ? ioctl_preallocate+0x300/0x300
[  379.984186]  ? __fget_light+0x2f7/0x440
[  379.984204]  ? __schedule+0x1ea0/0x1ea0
[  379.989952] loop4: rw=1, want=73, limit=2
[  379.994185]  ? fget_raw+0x20/0x20
[  379.994198]  ? __alloc_fd+0x710/0x710
[  379.994213]  ? __x64_sys_futex+0x47f/0x6a0
[  379.994221]  ? fd_install+0x4d/0x60
[  379.994243]  ? security_file_ioctl+0x94/0xc0
[  380.117448]  ksys_ioctl+0xa9/0xd0
[  380.120901]  __x64_sys_ioctl+0x73/0xb0
[  380.124777]  do_syscall_64+0x1b9/0x820
[  380.128667]  ? finish_task_switch+0x1d3/0x870
[  380.133162]  ? syscall_return_slowpath+0x5e0/0x5e0
[  380.138081]  ? syscall_return_slowpath+0x31d/0x5e0
[  380.143003]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  380.148019]  ? prepare_exit_to_usermode+0x291/0x3b0
[  380.153039]  ? perf_trace_sys_enter+0xb10/0xb10
[  380.157702]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  380.162560]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  380.167753] RIP: 0033:0x455ab9
[  380.170931] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
[  380.190096] RSP: 002b:00007f46b0b73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  380.197813] RAX: ffffffffffffffda RBX: 00007f46b0b746d4 RCX: 0000000000455ab9
[  380.205084] RDX: 0000000020000140 RSI: 00000000400452c8 RDI: 0000000000000014
[  380.212360] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  380.219631] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  380.226903] R13: 00000000004bdaad R14: 00000000004cc4c0 R15: 0000000000000000
[  380.234181] 
[  380.235837] Allocated by task 23864:
[  380.239545]  save_stack+0x43/0xd0
[  380.242988]  kasan_kmalloc+0xc4/0xe0
[  380.246704]  kmem_cache_alloc_trace+0x152/0x780
[  380.251363]  rfcomm_dlc_alloc+0xb8/0x490
[  380.255413]  rfcomm_sock_alloc.constprop.6+0x13a/0x420
[  380.260677]  rfcomm_sock_create+0xf0/0x2b0
[  380.264909]  bt_sock_create+0x16b/0x2d0
[  380.268878]  __sock_create+0x53c/0x940
[  380.272765]  __sys_socket+0x106/0x260
[  380.276575]  __x64_sys_socket+0x73/0xb0
[  380.280549]  do_syscall_64+0x1b9/0x820
[  380.284429]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  380.289610] 
[  380.291227] Freed by task 26096:
[  380.294593]  save_stack+0x43/0xd0
[  380.298035]  __kasan_slab_free+0x11a/0x170
[  380.302270]  kasan_slab_free+0xe/0x10
[  380.306072]  kfree+0xd9/0x260
[  380.309176]  rfcomm_dlc_free+0x1e/0x30
[  380.313056]  rfcomm_dev_ioctl+0x1dfe/0x2240
[  380.317367]  rfcomm_sock_ioctl+0x89/0xb0
[  380.321428]  sock_do_ioctl+0xe4/0x3e0
[  380.325230]  sock_ioctl+0x30d/0x680
[  380.328856]  do_vfs_ioctl+0x1de/0x1720
[  380.332753]  ksys_ioctl+0xa9/0xd0
[  380.336214]  __x64_sys_ioctl+0x73/0xb0
[  380.340130]  do_syscall_64+0x1b9/0x820
[  380.344033]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  380.349214] 
[  380.350852] The buggy address belongs to the object at ffff8801d2c1b340
[  380.350852]  which belongs to the cache kmalloc-512 of size 512
[  380.363503] The buggy address is located 324 bytes inside of
[  380.363503]  512-byte region [ffff8801d2c1b340, ffff8801d2c1b540)
[  380.376038] The buggy address belongs to the page:
[  380.380966] page:ffffea00074b06c0 count:1 mapcount:0 mapping:ffff8801da800940 index:0x0
[  380.389191] flags: 0x2fffc0000000200(slab)
[  380.393429] raw: 02fffc0000000200 ffffea00073f55c8 ffffea0007245f88 ffff8801da800940
[  380.401305] raw: 0000000000000000 ffff8801d2c1b0c0 0000000100000006 0000000000000000
[  380.409180] page dumped because: kasan: bad access detected
[  380.414887] 
[  380.416522] Memory state around the buggy address:
[  380.421463]  ffff8801d2c1b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  380.428811]  ffff8801d2c1b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  380.436169] >ffff8801d2c1b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  380.443516]                    ^
[  380.446878]  ffff8801d2c1b500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  380.454240]  ffff8801d2c1b580: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[  380.461597] ==================================================================
[  380.469481] Kernel panic - not syncing: panic_on_warn set ...
[  380.469481] 
[  380.476865] CPU: 0 PID: 26132 Comm: syz-executor7 Tainted: G    B             4.18.0-rc5-next-20180720+ #12
[  380.486731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  380.496088] Call Trace:
[  380.498869]  dump_stack+0x1c9/0x2b4
[  380.502506]  ? dump_stack_print_info.cold.2+0x52/0x52
[  380.507699]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  380.512456]  panic+0x238/0x4e7
[  380.515654]  ? add_taint.cold.5+0x16/0x16
[  380.519806]  ? do_raw_spin_unlock+0xa7/0x2f0
[  380.524205]  ? do_raw_spin_unlock+0xa7/0x2f0
[  380.528622]  ? rfcomm_dlc_exists+0x1be/0x1f0
[  380.533068]  kasan_end_report+0x47/0x4f
[  380.537055]  kasan_report.cold.7+0x76/0x30d
[  380.541477]  __asan_report_load1_noabort+0x14/0x20
[  380.546433]  rfcomm_dlc_exists+0x1be/0x1f0
[  380.550680]  rfcomm_dev_ioctl+0x105e/0x2240
[  380.555012]  ? rfcomm_dev_state_change+0x150/0x150
[  380.559963]  ? lock_release+0xa30/0xa30
[  380.563939]  ? kasan_check_read+0x11/0x20
[  380.568108]  ? do_raw_spin_trylock+0x1c0/0x1c0
[  380.572701]  ? kasan_check_write+0x14/0x20
[  380.576960]  ? lock_sock_nested+0x9f/0x120
[  380.581206]  ? trace_hardirqs_on+0xd/0x10
[  380.585372]  ? __local_bh_enable_ip+0x161/0x230
[  380.590056]  rfcomm_sock_ioctl+0x89/0xb0
[  380.594110]  sock_do_ioctl+0xe4/0x3e0
[  380.597911]  ? __fget+0x4ac/0x740
[  380.601358]  ? compat_ifr_data_ioctl+0x170/0x170
[  380.606113]  ? lock_release+0xa30/0xa30
[  380.610085]  ? __schedule+0x884/0x1ea0
[  380.616501]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  380.621701]  sock_ioctl+0x30d/0x680
[  380.625335]  ? dlci_ioctl_set+0x40/0x40
[  380.629324]  ? ksys_dup3+0x690/0x690
[  380.633030]  ? errseq_sample+0xe5/0x130
[  380.637025]  ? __fd_install+0x2db/0x880
[  380.640991]  ? dlci_ioctl_set+0x40/0x40
[  380.644990]  do_vfs_ioctl+0x1de/0x1720
[  380.648875]  ? ioctl_preallocate+0x300/0x300
[  380.653294]  ? __fget_light+0x2f7/0x440
[  380.657257]  ? __schedule+0x1ea0/0x1ea0
[  380.661231]  ? fget_raw+0x20/0x20
[  380.664674]  ? __alloc_fd+0x710/0x710
[  380.668479]  ? __x64_sys_futex+0x47f/0x6a0
[  380.672708]  ? fd_install+0x4d/0x60
[  380.676342]  ? security_file_ioctl+0x94/0xc0
[  380.680755]  ksys_ioctl+0xa9/0xd0
[  380.684204]  __x64_sys_ioctl+0x73/0xb0
[  380.688116]  do_syscall_64+0x1b9/0x820
[  380.692021]  ? finish_task_switch+0x1d3/0x870
[  380.696733]  ? syscall_return_slowpath+0x5e0/0x5e0
[  380.701807]  ? syscall_return_slowpath+0x31d/0x5e0
[  380.706762]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  380.711786]  ? prepare_exit_to_usermode+0x291/0x3b0
[  380.716796]  ? perf_trace_sys_enter+0xb10/0xb10
[  380.721463]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  380.726316]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  380.731505] RIP: 0033:0x455ab9
[  380.734684] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 
[  380.754076] RSP: 002b:00007f46b0b73c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  380.761784] RAX: ffffffffffffffda RBX: 00007f46b0b746d4 RCX: 0000000000455ab9
[  380.769049] RDX: 0000000020000140 RSI: 00000000400452c8 RDI: 0000000000000014
[  380.776319] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
[  380.783591] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  380.790862] R13: 00000000004bdaad R14: 00000000004cc4c0 R15: 0000000000000000
[  380.798892] Dumping ftrace buffer:
[  380.802696]    (ftrace buffer empty)
[  380.806400] Kernel Offset: disabled
[  380.810023] Rebooting in 86400 seconds..