[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.535293] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.416651] random: sshd: uninitialized urandom read (32 bytes read) [ 18.669005] random: sshd: uninitialized urandom read (32 bytes read) [ 19.261954] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. [ 24.723757] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/06 18:26:39 fuzzer started [ 25.962120] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/06 18:26:41 dialing manager at 10.128.0.26:41359 2018/08/06 18:26:45 syscalls: 1 2018/08/06 18:26:45 code coverage: enabled 2018/08/06 18:26:45 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/06 18:26:45 setuid sandbox: enabled 2018/08/06 18:26:45 namespace sandbox: enabled 2018/08/06 18:26:45 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/06 18:26:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/06 18:26:45 net packed injection: enabled 2018/08/06 18:26:45 net device setup: enabled [ 32.005815] random: crng init done 18:27:33 executing program 0: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) setpriority(0x2, 0x0, 0x7) 18:27:33 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) 18:27:33 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:33 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) connect(r0, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) 18:27:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x42, 0x201}, 0x14}}, 0x0) 18:27:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 18:27:33 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) 18:27:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000d97000)={0x0, 0x1000000200007d}) [ 78.676870] IPVS: Creating netns size=2536 id=1 [ 78.744141] IPVS: Creating netns size=2536 id=2 [ 78.889376] IPVS: Creating netns size=2536 id=3 [ 78.936148] IPVS: Creating netns size=2536 id=4 [ 78.979824] IPVS: Creating netns size=2536 id=5 [ 79.045948] IPVS: Creating netns size=2536 id=6 [ 79.110012] IPVS: Creating netns size=2536 id=7 [ 79.189860] IPVS: Creating netns size=2536 id=8 [ 79.613017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.649092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.667460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.698526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.799941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.849577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.882313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.903317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.924866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.947115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 79.955157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.003009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.036549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.054603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.093273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.117619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.214280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.239857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.257960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.265852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.292177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.307846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.315371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.326909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.335706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.363318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.401015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.413209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.429824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.443053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.477406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.516912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.535363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.546702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.554658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.564806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.589242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.597765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.605273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.620540] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.632218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 80.643921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.656098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.668102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.685762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.693409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.702034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.726935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 80.733990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.748477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.755423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.798874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.827560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.835981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 80.858863] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.871266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.881234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.892577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.906273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.913807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.924523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.934958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 80.944580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.955240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 80.963568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 80.973795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.986162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.993690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.001385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.009112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.016535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.027649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.036537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.046902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.054591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.073432] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.083321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.095828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.106736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.113894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.130046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.149382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.157655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.167699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.183318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.197416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.204944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.229290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 81.237906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.248258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.256052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.263630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.271747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.283587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 81.301429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.312102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.764184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.837790] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.852428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.886546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.915899] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.972168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 84.988576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.996098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.008737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.022997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.032305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.055350] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.062896] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.079538] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.098844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.108415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.118072] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.125701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.132432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.147771] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.197307] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.203511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.214459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.262122] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.281720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.289526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.308142] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.315014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.323571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.406909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.413721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.426544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.382314] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure [ 86.546179] Process accounting resumed [ 86.615499] hrtimer: interrupt took 38390 ns 18:27:41 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) poll(&(0x7f0000000080)=[{r3}, {r2}, {r1}, {r1}, {r3}], 0x5, 0xffff) 18:27:41 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x42, 0x201}, 0x14}}, 0x0) [ 86.687316] Process accounting resumed 18:27:41 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) 18:27:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x42, 0x201}, 0x14}}, 0x0) 18:27:41 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) poll(&(0x7f0000000080)=[{r3}, {r2}, {r1}, {r1}, {r3}], 0x5, 0xffff) 18:27:41 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) connect(r0, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) 18:27:41 executing program 6: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4, @multicast2}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000240)="707070311b656d3176626f786e657430", 0x10, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32]], &(0x7f0000000040)='grpquota', 0x8, 0x0) 18:27:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x42, 0x201}, 0x14}}, 0x0) 18:27:41 executing program 4: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:41 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) [ 86.896492] Process accounting resumed [ 86.912433] IPVS: Creating netns size=2536 id=9 18:27:41 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) poll(&(0x7f0000000080)=[{r3}, {r2}, {r1}, {r1}, {r3}], 0x5, 0xffff) 18:27:41 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) 18:27:41 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:42 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) 18:27:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 87.278851] Process accounting resumed 18:27:42 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) connect(r0, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) 18:27:42 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:42 executing program 4: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:42 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) poll(&(0x7f0000000080)=[{r3}, {r2}, {r1}, {r1}, {r3}], 0x5, 0xffff) 18:27:42 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) [ 87.448952] syz-executor1 (6945) used greatest stack depth: 23624 bytes left [ 87.516136] Process accounting resumed [ 87.567186] Process accounting resumed 18:27:42 executing program 6: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4, @multicast2}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000240)="707070311b656d3176626f786e657430", 0x10, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32]], &(0x7f0000000040)='grpquota', 0x8, 0x0) 18:27:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:42 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) connect(r0, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) 18:27:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080), 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x40, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback}, @in6=@local}}, 0x40}}, 0x0) [ 87.653586] EXT4-fs (loop4): unable to read superblock 18:27:42 executing program 4: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000140)={0x0, 0x19, 0x0, 0x39, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000}, 0x0) time(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'bcsf0\x00', {0x2, 0x4e24, @remote}}) mknod(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f0000000740)='./file0\x00', 0x400000000000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e20, 0x3db8000000000000, @dev, 0xffffffffffffff7f}, {0xa, 0x4e21, 0xff, @ipv4={[], [], @remote}, 0x59e2}, 0x0, [0x5, 0xfffffffffffffffe, 0x1c90, 0x8, 0x8, 0x80000001, 0x2, 0x80000001]}, 0x5c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x401, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000b40)="11256b0413ff150285a8be728792ea8d010f73f3ebd853fa", 0x18}], 0x0, &(0x7f0000000c00)=ANY=[]) umount2(&(0x7f0000000480)='./file0/file0\x00', 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000000c0)) 18:27:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080), 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x40, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback}, @in6=@local}}, 0x40}}, 0x0) 18:27:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080), 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x40, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback}, @in6=@local}}, 0x40}}, 0x0) [ 88.220259] pktgen: kernel_thread() failed for cpu 0 [ 88.225407] pktgen: Cannot create thread for cpu 0 (-4) [ 88.231308] pktgen: kernel_thread() failed for cpu 1 [ 88.236446] pktgen: Cannot create thread for cpu 1 (-4) [ 88.241802] pktgen: Initialization failed for all threads 18:27:43 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) 18:27:43 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:43 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080), 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x40, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback}, @in6=@local}}, 0x40}}, 0x0) 18:27:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x1020000100000001, 0x8) 18:27:43 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 18:27:43 executing program 6: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4, @multicast2}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000240)="707070311b656d3176626f786e657430", 0x10, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32]], &(0x7f0000000040)='grpquota', 0x8, 0x0) 18:27:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:43 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) [ 88.371832] keychord: keycode 4128 out of range [ 88.473253] pktgen: kernel_thread() failed for cpu 1 [ 88.531062] pktgen: Cannot create thread for cpu 1 (-4) [ 88.545014] IPVS: Creating netns size=2536 id=10 18:27:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) 18:27:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x1020000100000001, 0x8) 18:27:43 executing program 7: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 18:27:43 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 18:27:43 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:43 executing program 7: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 18:27:43 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) [ 88.675556] keychord: keycode 4128 out of range 18:27:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x1020000100000001, 0x8) [ 88.777242] IPVS: Creating netns size=2536 id=11 [ 88.779450] keychord: keycode 4128 out of range 18:27:44 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) 18:27:44 executing program 7: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000140)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000040)="7be4d6b00202ca53878499e01146863a2e7c8ca45e1910e5eba6453bb6f234b5a1b1bca731970a74bfc8e1793749ea18156c9b8a615bfa2f506fcf44060d36e38f66f111149434d5139e416358ea33f34b4507cdc299f7868d5f186e6bd604", &(0x7f00000000c0)="3c5d8da40d1477844fc4c160b6004a90edc520a6935a49cf5da4c2b525d13146ed27d429c762a4b0e9aaed82555cd1ae800d"}}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) 18:27:44 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:44 executing program 6: socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4, @multicast2}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000240)="707070311b656d3176626f786e657430", 0x10, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) setxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32]], &(0x7f0000000040)='grpquota', 0x8, 0x0) 18:27:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) write$eventfd(r1, &(0x7f0000000080)=0x1020000100000001, 0x8) 18:27:44 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) [ 89.189792] keychord: keycode 4128 out of range 18:27:44 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:44 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) [ 90.062702] pktgen: kernel_thread() failed for cpu 0 [ 90.077545] pktgen: Cannot create thread for cpu 0 (-4) [ 90.083458] pktgen: kernel_thread() failed for cpu 1 [ 90.089283] pktgen: Cannot create thread for cpu 1 (-4) [ 90.094661] pktgen: Initialization failed for all threads 18:27:45 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6bb8a0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r7, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) fcntl$setlease(r3, 0x400, 0x3) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r8, r0, &(0x7f00000000c0), 0x1) 18:27:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = memfd_create(&(0x7f0000000400)='\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f3"], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x11, r1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000001040)=""/4096, 0x12b8) 18:27:45 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:45 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x10000000000001, 0x4) 18:27:45 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:45 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:45 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:45 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x10000000000001, 0x4) [ 90.267166] pktgen: kernel_thread() failed for cpu 0 [ 90.272315] pktgen: Cannot create thread for cpu 0 (-4) [ 90.285119] pktgen: kernel_thread() failed for cpu 1 [ 90.301611] pktgen: Cannot create thread for cpu 1 (-4) [ 90.326509] pktgen: Initialization failed for all threads 18:27:45 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x10000000000001, 0x4) 18:27:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = memfd_create(&(0x7f0000000400)='\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f3"], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x11, r1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000001040)=""/4096, 0x12b8) 18:27:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00j\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="5b2d7365637572697479856370757365742c62646576766d6e65743040fe00", 0x1f, 0x0) 18:27:45 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00008d0ffc)=0x10000000000001, 0x4) 18:27:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = memfd_create(&(0x7f0000000400)='\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f3"], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x11, r1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000001040)=""/4096, 0x12b8) 18:27:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00j\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="5b2d7365637572697479856370757365742c62646576766d6e65743040fe00", 0x1f, 0x0) 18:27:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = memfd_create(&(0x7f0000000400)='\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f3"], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x11, r1, 0x0) fgetxattr(r1, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000001040)=""/4096, 0x12b8) 18:27:45 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) [ 91.407281] pktgen: kernel_thread() failed for cpu 0 [ 91.412427] pktgen: Cannot create thread for cpu 0 (-4) [ 91.417838] pktgen: kernel_thread() failed for cpu 1 [ 91.422931] pktgen: Cannot create thread for cpu 1 (-4) [ 91.428320] pktgen: Initialization failed for all threads 18:27:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) getcwd(&(0x7f00000001c0)=""/105, 0x69) 18:27:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00j\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="5b2d7365637572697479856370757365742c62646576766d6e65743040fe00", 0x1f, 0x0) 18:27:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000003c0), 0x2e4, &(0x7f0000000080)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 18:27:46 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 18:27:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:46 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000240)=0xe8) bind$packet(r1, &(0x7f0000000280)={0x11, 0xf7, r2, 0x1, 0x8, 0x6, @random="d9dd77e6fa1b"}, 0x14) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x70, 0x1, 0x3, 0x1abe, 0x6, 0x0, 0x59, 0xc0, 0x6, 0x6, 0x81, 0x8, 0x31, 0x4, 0x2, 0x7ff, 0x1, 0x6d70, 0x1, 0x2, 0x4, 0x5, 0x0, 0x2, 0xf20f, 0xf8, 0x200, 0x9, 0x0, 0x3, 0x1cc, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4080, 0x0, 0x8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x6, 0xffffffffffffffff, 0xb) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r3, &(0x7f0000000080), 0xfffffe5e) 18:27:46 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 18:27:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 18:27:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000003c0), 0x2e4, &(0x7f0000000080)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 18:27:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 18:27:46 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 18:27:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00j\x00\x00\x00\x00\x00\x00') fsetxattr(r0, &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)="5b2d7365637572697479856370757365742c62646576766d6e65743040fe00", 0x1f, 0x0) 18:27:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000003c0), 0x2e4, &(0x7f0000000080)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 18:27:46 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 18:27:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 18:27:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f00000003c0), 0x2e4, &(0x7f0000000080)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 18:27:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) getcwd(&(0x7f00000001c0)=""/105, 0x69) 18:27:46 executing program 5: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ftruncate(0xffffffffffffffff, 0x80080) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000640), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 18:27:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 18:27:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x29, &(0x7f0000000000), 0x0) 18:27:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) getcwd(&(0x7f00000001c0)=""/105, 0x69) 18:27:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) getcwd(&(0x7f00000001c0)=""/105, 0x69) 18:27:47 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 18:27:47 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 18:27:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x0, 0x1}, @increfs_done], 0xbe, 0x0, &(0x7f0000000380)="28dc0e6f6c31a0a625085861c21590bcb3f18c84288e1ae12c0d9a15e82710c72280e9c075d2f5aec0ac547fe77bd25a6124952f7d2a952cf536e4296bd4f0bffd45fac77dea75b6e8f6f3f37edd630184a2aa4509b4e04b102d13c835a6a697b3698ac2402f2686f0080b26efd23900bac6d4fdbfbe824d5c42dfea96c7c89825b142218b98f0684a9418e0a4d983b7d218c0e8d230b777e206302ccc928fb981367cb6f32731d102be09203d91714ab27216f6c7548a0aa79f326cdc7f"}) 18:27:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x29, &(0x7f0000000000), 0x0) 18:27:47 executing program 5: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ftruncate(0xffffffffffffffff, 0x80080) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000640), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 18:27:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0), 0x4) capset(&(0x7f00000008c0)={0x200f1526}, &(0x7f0000000900)={0x1, 0x0, 0x0, 0xc6, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) getsockname(r0, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000300)=[{}], 0x0, [{}, {}, {}]}, 0xa8) 18:27:47 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0xa13, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 18:27:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x29, &(0x7f0000000000), 0x0) [ 92.366474] binder: 7233:7238 BC_ACQUIRE_DONE u0000000000000000 node 1 cookie mismatch 0000000000000001 != 0000000000000000 18:27:47 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) 18:27:47 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4800, 0x0) ioctl$TCFLSH(r0, 0x540b, 0xff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x29, &(0x7f0000000000), 0x0) 18:27:47 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) [ 92.414424] binder: 7233:7238 BC_INCREFS_DONE node 1 has no pending increfs request 18:27:47 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0xa13, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 18:27:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x18, &(0x7f00000000c0)=0x9) socketpair$unix(0x1, 0x40000100000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) [ 92.548809] IPVS: Creating netns size=2536 id=12 18:27:47 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0xa13, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 18:27:47 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0xa13, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) [ 92.662830] IPVS: Creating netns size=2536 id=13 18:27:47 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 18:27:47 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) [ 93.158049] binder_alloc: binder_alloc_mmap_handler: 7233 20001000-20004000 already mapped failed -16 [ 93.167930] binder_alloc: 7233: binder_alloc_buf, no vma [ 93.168427] binder: BINDER_SET_CONTEXT_MGR already set [ 93.168434] binder: 7233:7315 ioctl 40046207 0 returned -16 [ 93.189395] binder: 7233:7316 transaction failed 29189/-3, size 0-0 line 3136 [ 93.205601] binder: 7233:7317 BC_ACQUIRE_DONE u0000000000000000 no match [ 93.212472] binder: 7233:7317 BC_INCREFS_DONE u0000000000000000 no match [ 93.224149] binder: undelivered TRANSACTION_ERROR: 29189 [ 93.224552] binder: release 7233:7238 transaction 2 out, still active [ 93.224555] binder: undelivered TRANSACTION_COMPLETE 18:27:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x0, 0x1}, @increfs_done], 0xbe, 0x0, &(0x7f0000000380)="28dc0e6f6c31a0a625085861c21590bcb3f18c84288e1ae12c0d9a15e82710c72280e9c075d2f5aec0ac547fe77bd25a6124952f7d2a952cf536e4296bd4f0bffd45fac77dea75b6e8f6f3f37edd630184a2aa4509b4e04b102d13c835a6a697b3698ac2402f2686f0080b26efd23900bac6d4fdbfbe824d5c42dfea96c7c89825b142218b98f0684a9418e0a4d983b7d218c0e8d230b777e206302ccc928fb981367cb6f32731d102be09203d91714ab27216f6c7548a0aa79f326cdc7f"}) 18:27:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 18:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x18, &(0x7f00000000c0)=0x9) socketpair$unix(0x1, 0x40000100000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) [ 93.224603] binder: send failed reply for transaction 2, target dead 18:27:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0), 0x4) capset(&(0x7f00000008c0)={0x200f1526}, &(0x7f0000000900)={0x1, 0x0, 0x0, 0xc6, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) getsockname(r0, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000300)=[{}], 0x0, [{}, {}, {}]}, 0xa8) 18:27:48 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4800, 0x0) ioctl$TCFLSH(r0, 0x540b, 0xff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:48 executing program 5: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ftruncate(0xffffffffffffffff, 0x80080) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000640), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 18:27:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 18:27:48 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 18:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x18, &(0x7f00000000c0)=0x9) socketpair$unix(0x1, 0x40000100000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) [ 93.283690] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 93.297629] FAT-fs (loop4): Filesystem has been set read-only [ 93.308838] binder: 7319:7324 BC_ACQUIRE_DONE u0000000000000000 node 4 cookie mismatch 0000000000000001 != 0000000000000000 18:27:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) [ 93.355370] binder: 7319:7324 BC_INCREFS_DONE node 4 has no pending increfs request 18:27:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 18:27:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 18:27:48 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4800, 0x0) ioctl$TCFLSH(r0, 0x540b, 0xff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x18, &(0x7f00000000c0)=0x9) socketpair$unix(0x1, 0x40000100000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x800042c05) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) close(r0) 18:27:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'lo\x00'}, 0x18) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) [ 93.698960] pktgen: kernel_thread() failed for cpu 0 [ 93.704120] pktgen: Cannot create thread for cpu 0 (-4) [ 93.731688] pktgen: kernel_thread() failed for cpu 1 [ 93.751567] pktgen: Cannot create thread for cpu 1 (-4) [ 93.770433] pktgen: Initialization failed for all threads 18:27:48 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) [ 94.087187] binder: release 7319:7324 transaction 5 out, still active [ 94.093889] binder: undelivered TRANSACTION_COMPLETE [ 94.116317] attempt to access beyond end of device [ 94.121277] loop4: rw=536870912, want=114, limit=112 [ 94.128270] Buffer I/O error on dev loop4, logical block 113, lost async page write 18:27:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x0, 0x1}, @increfs_done], 0xbe, 0x0, &(0x7f0000000380)="28dc0e6f6c31a0a625085861c21590bcb3f18c84288e1ae12c0d9a15e82710c72280e9c075d2f5aec0ac547fe77bd25a6124952f7d2a952cf536e4296bd4f0bffd45fac77dea75b6e8f6f3f37edd630184a2aa4509b4e04b102d13c835a6a697b3698ac2402f2686f0080b26efd23900bac6d4fdbfbe824d5c42dfea96c7c89825b142218b98f0684a9418e0a4d983b7d218c0e8d230b777e206302ccc928fb981367cb6f32731d102be09203d91714ab27216f6c7548a0aa79f326cdc7f"}) 18:27:48 executing program 7: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f00000000c0)=0xfffffffffffffe3e) 18:27:48 executing program 5: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') renameat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') ftruncate(0xffffffffffffffff, 0x80080) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000640), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 18:27:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0xd2, 0x9, 0xfffffffffffffffc, 0x6, 0x0, 0x7e30}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xcfd) 18:27:48 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4800, 0x0) ioctl$TCFLSH(r0, 0x540b, 0xff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 18:27:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0), 0x4) capset(&(0x7f00000008c0)={0x200f1526}, &(0x7f0000000900)={0x1, 0x0, 0x0, 0xc6, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) getsockname(r0, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000300)=[{}], 0x0, [{}, {}, {}]}, 0xa8) 18:27:49 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 18:27:49 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000100)="c2d022d00c8ecffd4f509e5cf0724866873c27addaefdbfba0e4d28a079b81faef2108b791ca007dede1d14556c462abe3c1d399147d88736c201a7cba63d6f5de28a9fdc460183fd8474825b33f278b0c350b16d8d96dd30c20ed36db1e8af9c60dd8176f21e4e12bf4fc52f003cbe926d26a106b90363af2a612c62bc6736e0f444c4b500f472a6fc3d428a5987a1202bd6e2e27c198d3fa7b8f7531b2472de7273d221b9f107acf421bf89742ffa2328c5fed51545390de90ce4a588509cdd5f0141228f1436592ce3f51fdabb7c2debce022b6b24035dc8af1ab3ba29d32cb6d3cba04421056a12133eef5fec9f8e3646547ded99c5cb6de286700d4", 0xfe, 0x8001}, {&(0x7f0000000240)}, {&(0x7f0000000280)="75da9a82d935a01ad15bc3e1f802281d9429e46463f92ba3ae93759b6a58ca15f9c66f8abe643e602378f63ea8aca249e7e25948bff6613799e9d3ab817db3d9a7234a0ca3573a055f9b02a31e4f8d932691e2607190edc1ecc390e0b3334a02c09929376ceed593353a18535ab1a182e1b634b95ee288f235e70a738d27bd9ee68d29acfb42dfae3e46fe2060ae5003f380157333ace5dbb3b2ebe129fb8181d9b6811803f8c25b968333f3c66acca0a17a3db16445b12dff7fd745af76f54985dc245482b56f243e85e85867af09e472cee7f370cae061d4332cd5436e487b1785c60398f6e75b85eb55e1d67a644afdc6a05d18f0d46786", 0xf9}, {&(0x7f0000000440)="5d99bd7086f0b9d4594ecf232829145c014107be6a3c459ebd506be9ecde873bc1ad484d24905d4f44136addaea3b79a9372391c8c3f6ed273d9ee9752d1c13feb27fccd0a0c7bc0d88ac44f00b79a83a8a0267270197fcfb731b627c30b6612b8a00020529cf3ad09104cc850e7b015cb61f6b5897e19f8128a", 0x7a, 0x6}], 0x0, &(0x7f0000000580)={[{}, {}, {}, {}, {}]}) open(&(0x7f0000000600)='./file0\x00', 0x4000, 0x20) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r2) [ 94.136304] attempt to access beyond end of device [ 94.140309] binder: send failed reply for transaction 5, target dead [ 94.162743] binder: 7386:7389 BC_ACQUIRE_DONE u0000000000000000 node 6 cookie mismatch 0000000000000001 != 0000000000000000 [ 94.162756] binder: 7386:7389 BC_INCREFS_DONE node 6 has no pending increfs request [ 94.233212] loop4: rw=536870912, want=115, limit=112 [ 94.244595] Buffer I/O error on dev loop4, logical block 114, lost async page write 18:27:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0xd2, 0x9, 0xfffffffffffffffc, 0x6, 0x0, 0x7e30}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xcfd) [ 94.264201] attempt to access beyond end of device [ 94.271586] loop4: rw=536870912, want=116, limit=112 [ 94.278215] Buffer I/O error on dev loop4, logical block 115, lost async page write [ 94.292089] attempt to access beyond end of device [ 94.301481] FAT-fs (loop7): invalid media value (0x5c) [ 94.301485] FAT-fs (loop7): Can't find a valid FAT filesystem [ 94.318552] loop4: rw=536870912, want=117, limit=112 [ 94.323887] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 94.332234] attempt to access beyond end of device [ 94.338012] loop4: rw=536870912, want=130, limit=112 [ 94.368684] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 94.389719] attempt to access beyond end of device [ 94.401579] loop4: rw=536870912, want=131, limit=112 18:27:49 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000100)="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", 0xfe, 0x8001}, {&(0x7f0000000240)}, {&(0x7f0000000280)="75da9a82d935a01ad15bc3e1f802281d9429e46463f92ba3ae93759b6a58ca15f9c66f8abe643e602378f63ea8aca249e7e25948bff6613799e9d3ab817db3d9a7234a0ca3573a055f9b02a31e4f8d932691e2607190edc1ecc390e0b3334a02c09929376ceed593353a18535ab1a182e1b634b95ee288f235e70a738d27bd9ee68d29acfb42dfae3e46fe2060ae5003f380157333ace5dbb3b2ebe129fb8181d9b6811803f8c25b968333f3c66acca0a17a3db16445b12dff7fd745af76f54985dc245482b56f243e85e85867af09e472cee7f370cae061d4332cd5436e487b1785c60398f6e75b85eb55e1d67a644afdc6a05d18f0d46786", 0xf9}, {&(0x7f0000000440)="5d99bd7086f0b9d4594ecf232829145c014107be6a3c459ebd506be9ecde873bc1ad484d24905d4f44136addaea3b79a9372391c8c3f6ed273d9ee9752d1c13feb27fccd0a0c7bc0d88ac44f00b79a83a8a0267270197fcfb731b627c30b6612b8a00020529cf3ad09104cc850e7b015cb61f6b5897e19f8128a", 0x7a, 0x6}], 0x0, &(0x7f0000000580)={[{}, {}, {}, {}, {}]}) open(&(0x7f0000000600)='./file0\x00', 0x4000, 0x20) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r2) [ 94.425822] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 94.468409] attempt to access beyond end of device [ 94.474844] loop4: rw=536870912, want=132, limit=112 [ 94.481985] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 94.491335] attempt to access beyond end of device [ 94.498185] loop4: rw=536870912, want=133, limit=112 [ 94.509136] FAT-fs (loop7): invalid media value (0x5c) [ 94.509141] FAT-fs (loop7): Can't find a valid FAT filesystem [ 94.520922] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 94.536920] attempt to access beyond end of device [ 94.543905] loop4: rw=536870912, want=1365, limit=112 18:27:49 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000100)="c2d022d00c8ecffd4f509e5cf0724866873c27addaefdbfba0e4d28a079b81faef2108b791ca007dede1d14556c462abe3c1d399147d88736c201a7cba63d6f5de28a9fdc460183fd8474825b33f278b0c350b16d8d96dd30c20ed36db1e8af9c60dd8176f21e4e12bf4fc52f003cbe926d26a106b90363af2a612c62bc6736e0f444c4b500f472a6fc3d428a5987a1202bd6e2e27c198d3fa7b8f7531b2472de7273d221b9f107acf421bf89742ffa2328c5fed51545390de90ce4a588509cdd5f0141228f1436592ce3f51fdabb7c2debce022b6b24035dc8af1ab3ba29d32cb6d3cba04421056a12133eef5fec9f8e3646547ded99c5cb6de286700d4", 0xfe, 0x8001}, {&(0x7f0000000240)}, {&(0x7f0000000280)="75da9a82d935a01ad15bc3e1f802281d9429e46463f92ba3ae93759b6a58ca15f9c66f8abe643e602378f63ea8aca249e7e25948bff6613799e9d3ab817db3d9a7234a0ca3573a055f9b02a31e4f8d932691e2607190edc1ecc390e0b3334a02c09929376ceed593353a18535ab1a182e1b634b95ee288f235e70a738d27bd9ee68d29acfb42dfae3e46fe2060ae5003f380157333ace5dbb3b2ebe129fb8181d9b6811803f8c25b968333f3c66acca0a17a3db16445b12dff7fd745af76f54985dc245482b56f243e85e85867af09e472cee7f370cae061d4332cd5436e487b1785c60398f6e75b85eb55e1d67a644afdc6a05d18f0d46786", 0xf9}, {&(0x7f0000000440)="5d99bd7086f0b9d4594ecf232829145c014107be6a3c459ebd506be9ecde873bc1ad484d24905d4f44136addaea3b79a9372391c8c3f6ed273d9ee9752d1c13feb27fccd0a0c7bc0d88ac44f00b79a83a8a0267270197fcfb731b627c30b6612b8a00020529cf3ad09104cc850e7b015cb61f6b5897e19f8128a", 0x7a, 0x6}], 0x0, &(0x7f0000000580)={[{}, {}, {}, {}, {}]}) open(&(0x7f0000000600)='./file0\x00', 0x4000, 0x20) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r2) 18:27:49 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1, 0x0) [ 94.570945] attempt to access beyond end of device [ 94.576527] loop4: rw=536870912, want=1366, limit=112 [ 94.582079] Buffer I/O error on dev loop4, logical block 1365, lost async page write 18:27:49 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1, 0x0) [ 94.643053] attempt to access beyond end of device [ 94.658350] loop4: rw=536870912, want=1367, limit=112 [ 94.664047] Buffer I/O error on dev loop4, logical block 1366, lost async page write [ 94.672592] attempt to access beyond end of device 18:27:49 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1, 0x0) 18:27:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4000000001, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) close(r3) dup3(r1, r2, 0x0) [ 94.700386] loop4: rw=536870912, want=1368, limit=112 [ 94.702780] FAT-fs (loop7): invalid media value (0x5c) [ 94.702784] FAT-fs (loop7): Can't find a valid FAT filesystem [ 94.743695] attempt to access beyond end of device [ 94.756161] loop4: rw=536870912, want=1369, limit=112 [ 94.764955] attempt to access beyond end of device [ 94.772090] loop4: rw=536870912, want=1398, limit=112 [ 94.781909] attempt to access beyond end of device [ 94.787264] loop4: rw=536870912, want=1399, limit=112 [ 94.793341] attempt to access beyond end of device [ 94.798720] loop4: rw=536870912, want=1400, limit=112 [ 94.804040] attempt to access beyond end of device [ 94.816726] loop4: rw=536870912, want=1401, limit=112 [ 94.827700] attempt to access beyond end of device [ 94.842146] loop4: rw=536870912, want=1422, limit=112 [ 94.854224] attempt to access beyond end of device [ 94.859651] loop4: rw=536870912, want=1423, limit=112 [ 94.864941] attempt to access beyond end of device [ 94.870208] loop4: rw=536870912, want=1424, limit=112 [ 94.875729] attempt to access beyond end of device [ 94.880741] loop4: rw=536870912, want=1425, limit=112 [ 94.886427] attempt to access beyond end of device [ 94.891445] loop4: rw=536870912, want=1458, limit=112 [ 94.897071] attempt to access beyond end of device [ 94.902283] loop4: rw=536870912, want=1459, limit=112 [ 94.907851] attempt to access beyond end of device [ 94.912886] loop4: rw=536870912, want=1460, limit=112 [ 94.918482] attempt to access beyond end of device [ 94.924047] loop4: rw=536870912, want=1461, limit=112 [ 94.929610] attempt to access beyond end of device [ 94.934819] loop4: rw=536870912, want=1474, limit=112 [ 94.940352] attempt to access beyond end of device [ 94.945370] loop4: rw=536870912, want=1475, limit=112 [ 94.950917] attempt to access beyond end of device [ 94.956445] binder: release 7386:7389 transaction 7 out, still active [ 94.956474] binder: undelivered TRANSACTION_COMPLETE [ 94.969868] pktgen: kernel_thread() failed for cpu 0 [ 94.969877] pktgen: Cannot create thread for cpu 0 (-4) [ 94.969889] pktgen: kernel_thread() failed for cpu 1 [ 94.969895] pktgen: Cannot create thread for cpu 1 (-4) [ 94.969897] pktgen: Initialization failed for all threads [ 95.004220] binder: send failed reply for transaction 7, target dead [ 95.013593] loop4: rw=536870912, want=1476, limit=112 [ 95.025894] attempt to access beyond end of device [ 95.045556] loop4: rw=536870912, want=1477, limit=112 [ 95.050791] attempt to access beyond end of device [ 95.056170] loop4: rw=536870912, want=1486, limit=112 [ 95.061367] attempt to access beyond end of device [ 95.067005] loop4: rw=536870912, want=1487, limit=112 [ 95.072204] attempt to access beyond end of device [ 95.077369] loop4: rw=536870912, want=1488, limit=112 [ 95.082561] attempt to access beyond end of device [ 95.087721] loop4: rw=536870912, want=1489, limit=112 [ 95.094633] attempt to access beyond end of device [ 95.099604] loop4: rw=536870912, want=3537, limit=112 [ 95.106920] attempt to access beyond end of device [ 95.111859] loop4: rw=536870912, want=5585, limit=112 [ 95.118779] attempt to access beyond end of device [ 95.123712] loop4: rw=536870912, want=7633, limit=112 [ 95.130537] attempt to access beyond end of device [ 95.135468] loop4: rw=536870912, want=9681, limit=112 18:27:50 executing program 1: syz_read_part_table(0x0, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x0) 18:27:50 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1, 0x0) 18:27:50 executing program 7: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/icmp6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000100)="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", 0xfe, 0x8001}, {&(0x7f0000000240)}, {&(0x7f0000000280)="75da9a82d935a01ad15bc3e1f802281d9429e46463f92ba3ae93759b6a58ca15f9c66f8abe643e602378f63ea8aca249e7e25948bff6613799e9d3ab817db3d9a7234a0ca3573a055f9b02a31e4f8d932691e2607190edc1ecc390e0b3334a02c09929376ceed593353a18535ab1a182e1b634b95ee288f235e70a738d27bd9ee68d29acfb42dfae3e46fe2060ae5003f380157333ace5dbb3b2ebe129fb8181d9b6811803f8c25b968333f3c66acca0a17a3db16445b12dff7fd745af76f54985dc245482b56f243e85e85867af09e472cee7f370cae061d4332cd5436e487b1785c60398f6e75b85eb55e1d67a644afdc6a05d18f0d46786", 0xf9}, {&(0x7f0000000440)="5d99bd7086f0b9d4594ecf232829145c014107be6a3c459ebd506be9ecde873bc1ad484d24905d4f44136addaea3b79a9372391c8c3f6ed273d9ee9752d1c13feb27fccd0a0c7bc0d88ac44f00b79a83a8a0267270197fcfb731b627c30b6612b8a00020529cf3ad09104cc850e7b015cb61f6b5897e19f8128a", 0x7a, 0x6}], 0x0, &(0x7f0000000580)={[{}, {}, {}, {}, {}]}) open(&(0x7f0000000600)='./file0\x00', 0x4000, 0x20) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xc8) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xffffffa0) close(r2) 18:27:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4000000001, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) close(r3) dup3(r1, r2, 0x0) 18:27:50 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 18:27:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x28, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x0, 0x1}, @increfs_done], 0xbe, 0x0, &(0x7f0000000380)="28dc0e6f6c31a0a625085861c21590bcb3f18c84288e1ae12c0d9a15e82710c72280e9c075d2f5aec0ac547fe77bd25a6124952f7d2a952cf536e4296bd4f0bffd45fac77dea75b6e8f6f3f37edd630184a2aa4509b4e04b102d13c835a6a697b3698ac2402f2686f0080b26efd23900bac6d4fdbfbe824d5c42dfea96c7c89825b142218b98f0684a9418e0a4d983b7d218c0e8d230b777e206302ccc928fb981367cb6f32731d102be09203d91714ab27216f6c7548a0aa79f326cdc7f"}) [ 95.142287] attempt to access beyond end of device [ 95.147458] loop4: rw=536870912, want=11729, limit=112 [ 95.154103] attempt to access beyond end of device [ 95.159269] loop4: rw=536870912, want=13777, limit=112 [ 95.166159] attempt to access beyond end of device [ 95.171097] loop4: rw=536870912, want=15825, limit=112 [ 95.178190] attempt to access beyond end of device [ 95.183122] loop4: rw=536870912, want=17873, limit=112 [ 95.199479] attempt to access beyond end of device [ 95.204478] loop4: rw=536870912, want=19921, limit=112 [ 95.213016] binder: 7465:7473 BC_ACQUIRE_DONE u0000000000000000 node 8 cookie mismatch 0000000000000001 != 0000000000000000 [ 95.213025] binder: 7465:7473 BC_INCREFS_DONE node 8 has no pending increfs request [ 95.240162] attempt to access beyond end of device [ 95.245134] loop4: rw=536870912, want=21969, limit=112 [ 95.262777] attempt to access beyond end of device [ 95.269973] IPVS: Creating netns size=2536 id=14 [ 95.286828] FAT-fs (loop7): invalid media value (0x5c) [ 95.286858] FAT-fs (loop7): Can't find a valid FAT filesystem [ 95.317059] loop4: rw=536870912, want=24017, limit=112 [ 95.325103] attempt to access beyond end of device [ 95.334869] loop4: rw=536870912, want=26065, limit=112 [ 95.347944] attempt to access beyond end of device [ 95.354569] loop4: rw=536870912, want=28113, limit=112 [ 95.361614] attempt to access beyond end of device [ 95.369100] loop4: rw=536870912, want=30161, limit=112 [ 95.377782] attempt to access beyond end of device [ 95.382763] loop4: rw=536870912, want=32209, limit=112 [ 95.397947] attempt to access beyond end of device [ 95.403022] loop4: rw=536870912, want=32985, limit=112 18:27:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0), 0x4) capset(&(0x7f00000008c0)={0x200f1526}, &(0x7f0000000900)={0x1, 0x0, 0x0, 0xc6, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) getsockname(r0, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000300)=[{}], 0x0, [{}, {}, {}]}, 0xa8) 18:27:50 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x60) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x10, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x4) 18:27:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@enc_lim, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1]}, 0x58) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) 18:27:50 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c) 18:27:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4000000001, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) close(r3) dup3(r1, r2, 0x0) 18:27:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0xd2, 0x9, 0xfffffffffffffffc, 0x6, 0x0, 0x7e30}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xcfd) 18:27:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@enc_lim, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1]}, 0x58) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) 18:27:50 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c) 18:27:50 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c) 18:27:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) [ 95.817984] tmpfs: No value for mount option './file0' [ 95.846183] attempt to access beyond end of device [ 95.856334] loop4: rw=536870912, want=114, limit=112 18:27:50 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0xff}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0x7}, 0x1c) 18:27:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@enc_lim, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1]}, 0x58) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) [ 95.884467] attempt to access beyond end of device 18:27:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4000000001, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) close(r3) dup3(r1, r2, 0x0) 18:27:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0xa, [], [@enc_lim, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @pad1]}, 0x58) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) [ 95.913539] loop4: rw=536870912, want=115, limit=112 [ 95.937513] attempt to access beyond end of device [ 95.943011] loop4: rw=536870912, want=116, limit=112 [ 95.954984] attempt to access beyond end of device [ 95.965570] loop4: rw=536870912, want=117, limit=112 18:27:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000340), 0x4924924924926c2, 0x0) 18:27:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) [ 95.984079] attempt to access beyond end of device [ 95.993919] binder: release 7465:7473 transaction 9 out, still active [ 95.993922] binder: undelivered TRANSACTION_COMPLETE [ 96.012032] binder: send failed reply for transaction 9, target dead [ 96.043876] loop4: rw=536870912, want=130, limit=112 [ 96.050391] attempt to access beyond end of device [ 96.055418] loop4: rw=536870912, want=131, limit=112 [ 96.085644] attempt to access beyond end of device [ 96.092089] loop4: rw=536870912, want=132, limit=112 [ 96.103923] attempt to access beyond end of device [ 96.110004] loop4: rw=536870912, want=133, limit=112 [ 96.116339] attempt to access beyond end of device [ 96.121269] loop4: rw=536870912, want=2189, limit=112 [ 96.128247] attempt to access beyond end of device [ 96.133169] loop4: rw=536870912, want=4237, limit=112 [ 96.140055] attempt to access beyond end of device [ 96.145228] loop4: rw=536870912, want=6285, limit=112 [ 96.151605] attempt to access beyond end of device [ 96.157540] loop4: rw=536870912, want=7125, limit=112 [ 96.163217] attempt to access beyond end of device [ 96.168165] loop4: rw=536870912, want=7126, limit=112 [ 96.173594] attempt to access beyond end of device [ 96.178536] loop4: rw=536870912, want=7127, limit=112 [ 96.183728] attempt to access beyond end of device [ 96.188659] loop4: rw=536870912, want=7128, limit=112 [ 96.193836] attempt to access beyond end of device [ 96.198832] loop4: rw=536870912, want=7129, limit=112 [ 96.204015] attempt to access beyond end of device [ 96.208940] loop4: rw=536870912, want=7158, limit=112 [ 96.214123] attempt to access beyond end of device [ 96.219189] loop4: rw=536870912, want=7159, limit=112 [ 96.224381] attempt to access beyond end of device [ 96.229308] loop4: rw=536870912, want=7160, limit=112 [ 96.234487] attempt to access beyond end of device [ 96.239461] loop4: rw=536870912, want=7161, limit=112 [ 96.244650] attempt to access beyond end of device [ 96.249628] loop4: rw=536870912, want=7182, limit=112 [ 96.254808] attempt to access beyond end of device [ 96.259731] loop4: rw=536870912, want=7183, limit=112 [ 96.264909] attempt to access beyond end of device [ 96.269879] loop4: rw=536870912, want=7184, limit=112 [ 96.275057] attempt to access beyond end of device [ 96.279997] loop4: rw=536870912, want=7185, limit=112 [ 96.285175] attempt to access beyond end of device [ 96.290532] loop4: rw=536870912, want=7218, limit=112 [ 96.295726] attempt to access beyond end of device [ 96.300639] loop4: rw=536870912, want=7219, limit=112 [ 96.305898] attempt to access beyond end of device [ 96.310812] loop4: rw=536870912, want=7220, limit=112 [ 96.316013] attempt to access beyond end of device [ 96.320924] loop4: rw=536870912, want=7221, limit=112 [ 96.326138] attempt to access beyond end of device [ 96.331049] loop4: rw=536870912, want=7234, limit=112 [ 96.336254] attempt to access beyond end of device [ 96.341164] loop4: rw=536870912, want=7235, limit=112 [ 96.346410] attempt to access beyond end of device [ 96.351324] loop4: rw=536870912, want=7236, limit=112 [ 96.356552] attempt to access beyond end of device [ 96.361464] loop4: rw=536870912, want=7237, limit=112 [ 96.366662] attempt to access beyond end of device [ 96.371582] loop4: rw=536870912, want=7246, limit=112 [ 96.376863] attempt to access beyond end of device [ 96.381780] loop4: rw=536870912, want=7247, limit=112 [ 96.386980] attempt to access beyond end of device [ 96.391902] loop4: rw=536870912, want=7248, limit=112 [ 96.397097] attempt to access beyond end of device [ 96.402009] loop4: rw=536870912, want=7249, limit=112 [ 96.407874] attempt to access beyond end of device [ 96.412788] loop4: rw=536870912, want=9297, limit=112 [ 96.419252] attempt to access beyond end of device [ 96.424173] loop4: rw=536870912, want=11345, limit=112 [ 96.430387] attempt to access beyond end of device [ 96.435386] loop4: rw=536870912, want=13393, limit=112 [ 96.441566] attempt to access beyond end of device [ 96.446512] loop4: rw=536870912, want=15441, limit=112 [ 96.452532] attempt to access beyond end of device [ 96.457569] loop4: rw=536870912, want=17489, limit=112 [ 96.463609] attempt to access beyond end of device [ 96.468593] loop4: rw=536870912, want=19537, limit=112 [ 96.474613] attempt to access beyond end of device [ 96.479563] loop4: rw=536870912, want=21585, limit=112 [ 96.485711] attempt to access beyond end of device [ 96.490622] loop4: rw=536870912, want=23633, limit=112 [ 96.496794] attempt to access beyond end of device [ 96.501708] loop4: rw=536870912, want=25681, limit=112 [ 96.507870] attempt to access beyond end of device [ 96.512783] loop4: rw=536870912, want=27729, limit=112 [ 96.518940] attempt to access beyond end of device [ 96.523863] loop4: rw=536870912, want=29777, limit=112 [ 96.530120] attempt to access beyond end of device [ 96.535034] loop4: rw=536870912, want=31825, limit=112 [ 96.540965] attempt to access beyond end of device [ 96.546206] loop4: rw=536870912, want=32985, limit=112 18:27:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0xd2, 0x9, 0xfffffffffffffffc, 0x6, 0x0, 0x7e30}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xcfd) 18:27:51 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 18:27:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'bpq0\x00', {0x2, 0x0, @loopback}}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x26, 0x200000000201}, 0x1d4}}, 0x0) 18:27:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200087fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0) 18:27:51 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 18:27:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000340), 0x4924924924926c2, 0x0) 18:27:51 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 18:27:51 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000000)="582f000000de000000000000040000034a", 0x11, 0x0, &(0x7f0000000080), 0x10) 18:27:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfffffee5, 0xfffffffffffffffe, 0x0, 0x0) 18:27:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200087fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0) 18:27:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'bpq0\x00', {0x2, 0x0, @loopback}}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x26, 0x200000000201}, 0x1d4}}, 0x0) 18:27:51 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) [ 96.937284] attempt to access beyond end of device [ 96.942403] loop4: rw=536870912, want=130, limit=112 [ 96.951568] attempt to access beyond end of device [ 96.968199] loop4: rw=536870912, want=131, limit=112 18:27:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x3, 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x2) close(r1) 18:27:51 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) 18:27:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000340), 0x4924924924926c2, 0x0) [ 97.005636] attempt to access beyond end of device [ 97.031053] loop4: rw=536870912, want=132, limit=112 [ 97.064383] attempt to access beyond end of device [ 97.081389] loop4: rw=536870912, want=133, limit=112 [ 97.094123] attempt to access beyond end of device [ 97.108523] loop4: rw=536870912, want=142, limit=112 18:27:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000340), 0x4924924924926c2, 0x0) 18:27:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'bpq0\x00', {0x2, 0x0, @loopback}}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x26, 0x200000000201}, 0x1d4}}, 0x0) 18:27:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200087fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0) 18:27:52 executing program 7: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) [ 97.120229] attempt to access beyond end of device [ 97.125184] loop4: rw=536870912, want=143, limit=112 [ 97.135557] attempt to access beyond end of device [ 97.140535] loop4: rw=536870912, want=144, limit=112 [ 97.146164] attempt to access beyond end of device [ 97.151096] loop4: rw=536870912, want=145, limit=112 [ 97.158205] attempt to access beyond end of device [ 97.163281] loop4: rw=536870912, want=2193, limit=112 [ 97.172600] attempt to access beyond end of device [ 97.183330] loop4: rw=536870912, want=4241, limit=112 [ 97.198124] attempt to access beyond end of device [ 97.216242] loop4: rw=536870912, want=6289, limit=112 [ 97.228050] attempt to access beyond end of device [ 97.237674] loop4: rw=536870912, want=6553, limit=112 [ 97.242967] attempt to access beyond end of device [ 97.249771] loop4: rw=536870912, want=6582, limit=112 [ 97.254984] attempt to access beyond end of device [ 97.261157] loop4: rw=536870912, want=6583, limit=112 [ 97.266617] attempt to access beyond end of device [ 97.271539] loop4: rw=536870912, want=6584, limit=112 [ 97.277016] attempt to access beyond end of device [ 97.281940] loop4: rw=536870912, want=6585, limit=112 [ 97.287518] attempt to access beyond end of device [ 97.292442] loop4: rw=536870912, want=6606, limit=112 [ 97.297982] attempt to access beyond end of device [ 97.302909] loop4: rw=536870912, want=6607, limit=112 [ 97.308377] attempt to access beyond end of device [ 97.313303] loop4: rw=536870912, want=6608, limit=112 [ 97.318770] attempt to access beyond end of device [ 97.323692] loop4: rw=536870912, want=6609, limit=112 [ 97.329761] attempt to access beyond end of device [ 97.334687] loop4: rw=536870912, want=6658, limit=112 [ 97.340211] attempt to access beyond end of device [ 97.345133] loop4: rw=536870912, want=6659, limit=112 [ 97.351199] attempt to access beyond end of device [ 97.356402] loop4: rw=536870912, want=6660, limit=112 [ 97.361592] attempt to access beyond end of device [ 97.366851] loop4: rw=536870912, want=6661, limit=112 [ 97.372044] attempt to access beyond end of device [ 97.377804] loop4: rw=536870912, want=6670, limit=112 [ 97.382997] attempt to access beyond end of device [ 97.388166] loop4: rw=536870912, want=6671, limit=112 [ 97.393358] attempt to access beyond end of device [ 97.398529] loop4: rw=536870912, want=6672, limit=112 [ 97.403720] attempt to access beyond end of device [ 97.408963] loop4: rw=536870912, want=6673, limit=112 [ 97.415167] attempt to access beyond end of device [ 97.421033] loop4: rw=536870912, want=8721, limit=112 [ 97.427867] attempt to access beyond end of device [ 97.432797] loop4: rw=536870912, want=10769, limit=112 [ 97.439723] attempt to access beyond end of device [ 97.444653] loop4: rw=536870912, want=12817, limit=112 [ 97.451689] attempt to access beyond end of device [ 97.456913] loop4: rw=536870912, want=14865, limit=112 [ 97.463567] attempt to access beyond end of device [ 97.469353] loop4: rw=536870912, want=16913, limit=112 [ 97.476333] attempt to access beyond end of device [ 97.481264] loop4: rw=536870912, want=18961, limit=112 [ 97.488184] attempt to access beyond end of device [ 97.493115] loop4: rw=536870912, want=21009, limit=112 [ 97.500062] attempt to access beyond end of device [ 97.505000] loop4: rw=536870912, want=23057, limit=112 [ 97.511904] attempt to access beyond end of device [ 97.517148] loop4: rw=536870912, want=25105, limit=112 [ 97.523791] attempt to access beyond end of device [ 97.529572] loop4: rw=536870912, want=27153, limit=112 [ 97.536500] attempt to access beyond end of device [ 97.541431] loop4: rw=536870912, want=29201, limit=112 [ 97.548329] attempt to access beyond end of device [ 97.553257] loop4: rw=536870912, want=31249, limit=112 [ 97.560056] attempt to access beyond end of device [ 97.564987] loop4: rw=536870912, want=32993, limit=112 18:27:52 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:52 executing program 7: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) 18:27:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x3, 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x2) close(r1) 18:27:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8c, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 18:27:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'bpq0\x00', {0x2, 0x0, @loopback}}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x26, 0x200000000201}, 0x1d4}}, 0x0) 18:27:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200087fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0) 18:27:52 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x1000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000002000), 0xffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:27:52 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000000)="582f000000de000000000000040000034a", 0x11, 0x0, &(0x7f0000000080), 0x10) 18:27:52 executing program 7: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) 18:27:52 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r1, r2) 18:27:52 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000000)="582f000000de000000000000040000034a", 0x11, 0x0, &(0x7f0000000080), 0x10) 18:27:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x3, 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x2) close(r1) 18:27:52 executing program 7: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) 18:27:52 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x2000000084) sendto$inet(r0, &(0x7f0000000000)="582f000000de000000000000040000034a", 0x11, 0x0, &(0x7f0000000080), 0x10) 18:27:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r1, r2) 18:27:53 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x1000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000002000), 0xffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:27:53 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000003c00)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000014) 18:27:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x3, 0xfd86) sendmmsg(r1, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvmsg(r2, &(0x7f0000001280)={&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=""/216, 0xd8}, 0x2) close(r1) 18:27:53 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8c, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 18:27:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r1, r2) 18:27:53 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r1, r2) 18:27:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x102, 0x400}], 0x0, &(0x7f0000012e00)) 18:27:53 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f49338003280cba762268e62b14b7ae78571512fc3b589f402db1c08513f0ded6e40a03a29efca39bafbf63e3e4b60fd268675326ae396833e48daee94e887af86d74dc202b0681331461d67bf873f30dc4cd3dc8ab7c59f0a259c30a06b0ec37d7759c5d6b073b3feea2a72e1af5503e259d30b98dc98d67d3354bb9f06b63a78e235189e3497a62f98bfa9e165775ec29af5ca492de44304ac33aaea65b45383b33376830b4b206bdfb97e36afff62b71c9487b7d6d0fcd07d8dc654bbc4d52f550825f34ccb1c1162dfe3d66eb159d98b130ee24a936e431c8c04bb0e28bdb0f8358be2b72aa5f42eb66279573adc6058764ced002325c0acf0029e9840d6a4b2e7924733d7d94bd0db5c901a3c1415a1ea6f4a4d15d7f91bdac94fca88c98d5a022f8439f253d76a0e23968c48b26c00c84683359d42c3c1ecf93f7118a582e4d21c59b85d50c5e0b16681f017a0658a0e195fe322fab16f51d1eeaf4a9b702ff44a9dcddcc8b531ca00dcfa3e8770ecc918bebf379925253ddea9e53d6232202d77974aa3978bd9d51ddb1417780aa16498dce71760b346bc4f38939f3deeda2551e84087a2797e00175fb1af143724d969cead04999af8ee2de0799941ca5be211d2eb379f274fecbbf2659cf97a7e27453b88f9369f2e6a01ad155ec008d086acaa7e3d20d4f2f929d3cdfaf6e95d4c8a42e9a3863a3f7de05b8e71b12", 0x1000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000002000), 0xffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:27:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8c, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 99.140548] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (10de6da8) 18:27:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18:27:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff000000000000000400"], 0xc9) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:27:54 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x102, 0x400}], 0x0, &(0x7f0000012e00)) 18:27:54 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x1000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000002000), 0xffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 18:27:54 executing program 5: r0 = memfd_create(&(0x7f0000000380)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28}, 0x28) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 18:27:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8c, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 18:27:54 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18:27:54 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001380)=""/147) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = memfd_create(&(0x7f0000000100)="000080a8", 0x0) ftruncate(r4, 0x20000000040002) sendfile(r2, r6, &(0x7f000000a000), 0x7ffff) r7 = fcntl$getown(r1, 0x9) mq_notify(r6, &(0x7f0000000180)={0x0, 0x35, 0x0, @tid=r7}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) ioctl$FICLONE(r4, 0x40049409, r5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x10001}) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 18:27:54 executing program 5: r0 = memfd_create(&(0x7f0000000380)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28}, 0x28) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 18:27:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 99.968948] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (10de6da8) 18:27:54 executing program 5: r0 = memfd_create(&(0x7f0000000380)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28}, 0x28) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 18:27:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x102, 0x400}], 0x0, &(0x7f0000012e00)) 18:27:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 18:27:54 executing program 5: r0 = memfd_create(&(0x7f0000000380)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28}, 0x28) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) [ 100.120412] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (10de6da8) 18:27:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RWRITE(r2, &(0x7f00000002c0)={0x1da}, 0x2) ftruncate(r2, 0x80003) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) 18:27:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)) [ 100.264637] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 100.280917] FAT-fs (loop1): Filesystem has been set read-only [ 100.289609] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.298897] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.308742] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.333501] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.354528] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.380813] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.392054] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) [ 100.423967] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000202) 18:27:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) 18:27:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x102, 0x400}], 0x0, &(0x7f0000012e00)) 18:27:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) 18:27:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)) 18:27:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x802) 18:27:55 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) 18:27:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x802) 18:27:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) 18:27:55 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x802) [ 100.903448] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (10de6da8) 18:27:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x15, 0x4) 18:27:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)) 18:27:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x802) 18:27:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/group.stat\x00', 0x2761, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)) 18:27:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:56 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:56 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:58 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x1) 18:27:58 executing program 0: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000400)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @broadcast}, 'team0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f80), &(0x7f0000002fc0)=0xfffffe37) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000019c0)=[{&(0x7f0000000580)="37f63ad4f1662f209ecc403f9b53ef618013f617c9ba652998fdea4c7139aed03ba08db994a50b3a1cd8872885695c74a29be59e9ca18996fae2590f669667cb42b1cdfe47134f1d42186913349dc362a2d8a0c96c5c41", 0x57}], 0x1, 0x53) open(&(0x7f00000000c0)='./file0\x00', 0x2002, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000200)={'system_u:object_r:sshd_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x37}, 0xfffffe76) r0 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x0) dup(0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000380)="00eb0c432d0174df5f000000009e1f0583945f886a462b44dbe5a7331d5a1983b472d015338726a294b151609d9050c67000cce5b14340df2e982d7a323f3ff22f4ae72f2d0092854f", 0xfffffffffffffffe) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000280)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) userfaultfd(0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000002cc0)={'broute\x00', 0x0, 0x0, 0xd4, [], 0x2, &(0x7f0000002c00)=[{}, {}], &(0x7f0000002dc0)=""/212}, &(0x7f00000002c0)=0x78) 18:27:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) 18:27:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 18:27:58 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/46, &(0x7f0000000240)=0x2e) 18:27:58 executing program 1: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000500)) 18:27:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20051, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1}], 0x0, 0x0, &(0x7f0000000040)}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:27:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x1) 18:27:58 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/46, &(0x7f0000000240)=0x2e) [ 104.021559] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.038141] binder: 7893:7898 BC_ACQUIRE_DONE u0000000020ffb000 no match [ 104.046742] binder: BINDER_SET_CONTEXT_MGR already set 18:27:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 18:27:58 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/46, &(0x7f0000000240)=0x2e) 18:27:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x1) 18:27:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) 18:27:58 executing program 1: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000500)) [ 104.059390] binder: 7893:7909 BC_ACQUIRE_DONE u0000000020ffb000 no match [ 104.066040] ISOFS: Unable to identify CD-ROM format. [ 104.110594] binder: 7893:7898 ioctl 40046207 0 returned -16 18:27:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) [ 104.119524] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.126438] ISOFS: Unable to identify CD-ROM format. 18:27:59 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:59 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/46, &(0x7f0000000240)=0x2e) 18:27:59 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000), 0x1) 18:27:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) 18:27:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 18:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 18:27:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20051, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1}], 0x0, 0x0, &(0x7f0000000040)}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 104.213615] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.238591] ISOFS: Unable to identify CD-ROM format. 18:27:59 executing program 1: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000500)) 18:27:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20051, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1}], 0x0, 0x0, &(0x7f0000000040)}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:27:59 executing program 5: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000649000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x12) [ 104.301797] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 104.314336] binder: 7956:7960 BC_ACQUIRE_DONE u0000000020ffb000 no match [ 104.335273] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:27:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffffe, 0x7fffffff}, 0x8) r1 = epoll_create1(0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}) timerfd_create(0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r3, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r5, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 18:27:59 executing program 5: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000649000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x12) 18:27:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) [ 104.381223] binder: 7974:7978 BC_ACQUIRE_DONE u0000000020ffb000 no match 18:27:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20051, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, r1}], 0x0, 0x0, &(0x7f0000000040)}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:27:59 executing program 5: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000649000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x12) [ 104.484711] ISOFS: Unable to identify CD-ROM format. [ 104.497248] binder: 7996:8002 BC_ACQUIRE_DONE u0000000020ffb000 no match 18:27:59 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x200500, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 18:27:59 executing program 5: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000649000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0x12) 18:27:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffffe, 0x7fffffff}, 0x8) r1 = epoll_create1(0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}) timerfd_create(0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r3, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r5, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 18:27:59 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x101842, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) unlink(&(0x7f0000000240)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0xe00) 18:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 18:27:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816000000000000000002ab0000aedd8257004040000000000001ecff"], 0x2c) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") 18:27:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 1: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000500)) 18:27:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x101842, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) unlink(&(0x7f0000000240)='./file0\x00') write(r0, &(0x7f0000000600)="020d82d980351560b1c23ac6a32ec58f6fb8535f9064218f0eb18b4d0bac4bb8734aa7e06006ea5a889083e6dd005099a77546b828d90308b73ecf80b57536c13a5d031e51a277b03782ce617c4bbfae0680d2bbb5485156a01c1c881649ba6f4bfbdbf91fa9ca1264fee277d4d149157338b1534a77fcde6a3a1f942bc3d16a70683636846f524aa370895912d60d3eb7619c86a43ad09dd91c95eb5d6b0f216fac8ce36ac1baad12d0574a919bd9105adf2fb787f901b8e197fc1db0ef1cca00f9c8c850b14e71002f016b1bc26f9060282936f52ba8e56eeaa5cb294e30cb52a77c19d5877124805df873c002020172eeb441ff08fd1787ff69008209f10f8bb9fa8649f33e1d5f371d1d3002bca5a61584907bd573bbea0039d0b8f17a7bfb447bc351841135a9034ab9ac6041d4e8da39965c0983ba54ce8ab3e3b7d350b4303e38382d744f90a608d3f79de2137d757f8726c808bc2a033b334ed8c47e360fc4bc4fa14c8f4864a86ae6a490e331e66eea1987821b83346ace1327704f9bef951bb8cc3fe1912b12114d81c55a9c03ee310af0c59600166631faac8601d13b0863862712ec8960d27ad123516bbf004554794a8efded6cb8c948b8abdef5aec909764011ea2d2e1c8daefc7ae110e6d3fd9cee788f8b6ff77f49fb00c8b0ff255e0c03149701b9bed754201cf6fb0a1946a7299dc95acef5410e1d857045241081878998d19657e1cb8b1c0b0d63c8f4261e2627959f8d58c5c9aae486c1f3dd466a777b5fc0b4ec4337181531601e35296d47f03e1c83d4a31f6298a8557f87fba37e772d6f87609c80a5da5eea615b098a6a18ce63bb1921572c29e420004e00bd3c28b97e64c9de61136733368a6e552170315a40d4b1b416325d042dd9c6cef004e20aab061b47cf64c118c5e2a8bdf4bbd5f72060acc7878442ffb8a02140d482a0fc19ce78e37dba5b8c81a3f7bdabd87eb309a5e8e8c48c939c679afa64fe435df2fcd0e48d9a91ce1f16a6011380731f7c244dc348507f66eb4a471c576def381cff15c80a55573ab8294c86ca98dda0edb497a51b4263428ca388ed840762d7b09ab11886dde82edf5074dc977a89417969937592baa8e70b062b9144d76c9828c4a0f97488393a44afea29d271125dea4a657f159268e468d9dd380ab1df6c719b14f694a622640a960ac08604a195fe2cd988e2a672b46617e5e7a4fcc988770581d9492314d1d0faa491c9d531f813bab83482d0dc8f6278b24dbfd933a6db5d8a8d5d14580745df666f23d774be36d835b9feffa3b47548031ae0eb680b669d2834a4656997c07437284808dc3fca005402c7bb4139929b455f465ff867c717b10fcf8d556fc583d58513eb805fe027669ff7b40be06a0facc2b9e0bf54b0a7365f11c916da03ef39782747328539336646c3b7db580bf332af0cf2aaca294d8711763f93ce018ce8dc67cf955fc51c527a603f89c7238e197d53d88c736fa88520238e358af7f1d9292d3350fb2497bc20436f8901ea44d44936d585aa5ea3083dd336ae5ee072f223df334ea9c63f915605b22c93aa2fa78b480f9c722c560ea414feb17f172f0b0b06cb245e27055d46a2f4079b92c3d7ebfb405190b8c7a6fc6b9ae60def81addbbb07ca71c25e322eadc0ad005dc5666212a24ea12ebe38d23aa4d9019fd6a30da54b03366f21b74a8bd08f4eb7c1c338e5853096be2fca3363da2275701c0a9b81b79152a79bc8652602ea599d9e4aa47617cd8b0ae742ae6f5b7623a64db76ab675b5b7751154fee6950c1592a311794caae82f9e07ac49c37d1368d9aeeaf05be5705ed3ce366fd603d330359c864cdbab2c885c9600e015f10ea8ddca8f2dfec6f70898bc6ccd71a2f421d43f0e30971c6b6dfb395fc7759aa9412b37ca9ee11475725ff549238036793a016860762a420bfe4378571833eee00be31f0c3e06d15116dcc0cba05ebde6bd8543c050e372644c23c8ffd1cfdc2e4c4a7dedaa5c0e9d3cdb1e46bc8ed37f4ee7ccb9b78d9b733b0dd755c6d4d024b8976786ed67b4384dcd07471a79ac58401884be480a6ed37b3bf0fb016da0a15f495c528d0e177d445077634c03406a85ed226ac974b45d6caf3229267a7e093039040d6d7bead6046340a041ad1210eb6ba96798551f811b549d45f864502dcd8acacb5a8128e9b22ff309730405b6a6041f0e3150534c377584dd06fd2b7298b40b219a385c0a0dafc235f89520d279b78a8c490dbe1ba7b0cf1b7d97877df7110db73678caa2a4a06180227f50f2b4345ee7d6908cde9fc0e607c06313057ac7ea45c746c0a1d01b96f3b858bcb50499fd9d5f169245c0bf61e0ee2e9448ddaf5f6dee84346e88e3e0e8424158dd19901fc62480e1b8fce0e35b1af33d325fc1d9f099ebdb443a7a9e2d5b790064cfe83ef2cffc032764a3dbab5c192b2b706f2490c4132ecdfb8199379ef5753b342220474dce5fa8350bf773cfe6ea4e59069afe26d13e2520cbe160d6e6277f66f59f662010ca8b04c39c13dbe58714b0c20fb60ce35956f03d0ce7d1c8f49fe58e4e02b0dfb2bfa7e2f9266d4d277a26c20eba8fe9e1a6f4d33eea0408e7851037feaf98b206e715f4f271a5540b4378c66ff443bfc27590b804ce0113a49d0f9a228704e060f941ac4cab43a092b8cb631f4e42bc01eab16df656ddc336443a174d3620727248fe661c7708aa666593cf292a9b260e9add7c2b2f529123b61c1dbe90040befa16ac143a85edcea9909505abea838f55417f22907db516c7834c721501bdbf6da88b3d2b7614a5a0c47eef47df8a14e1903246f7c0a19ffe9b1b430757337787bf0c4806b077a23c186b10fcaa45b6b9b835352b302a365383526bf528bc1447a32f820a835a70be016ce7c8ccdd44818590b0bb78d873ec82d358157c17bb7d492e1380d55726a53e841e0db10c75cf60f1f45462aadb7ac68492dd82f44474e5526fc6464821218be14456c2b82880b4b5695331eb765f7af222d074a6340deca2efefc3252407128d9667c082dc9132934b6bfaf495739bceb72519f96083960364bfd530935cff84639e86f7c7d7ff8c09c150c297cdf1d1d5c72375941b54bad98a8c7da0e1bc72ad4f409cead9442cb416627aece9fce6738314f34169515fefae96aef56e73f1e0ce996db7cc7f51ea68b0f1eff5fa6458b54948be60fd864055dab9e61dd9811211ef9a8a6005fd1acc3ac5f583d51a678334a8614687c66ae6da740d6c4f90e17583e66057ff5d1257c22360bdac855c04b89d1fbacbc35b767d0b8b3af3852c5456bef48b3552b18d602cbae9e7608892ea9707091020693152c14fb11b3034753a96e6967193787d34b8c02790d5d7b657cf60e8dcee76a7019a6cb15b9bed93aeba3b9301bd716d0c526f1250076db165bbaec71f5235b240dd7c47efbcba6023a813cfd0c9e214f053b8e4506f6f5d19a75649273ea314169176cf5a58c12a032facfd26e4f7b99bb6b781eb6e9b1d9d569c8ee418e768507ba679a03eeb67aed511fc8020c54d7aca03391fe8d552d5c09247a2d1296af357583932ed06f267aa226c48c049458efcf557efa57a12629e94910c2a2790aa097f9618eac64206c40da2c5ba56d89be13b80a8c1b5f323335418d32c78887c67c4353c9bcd3b9ecd7ebfed12bb1c181d0a2656468c7397ce36a3977d6962050268d345085d32d8a150cf3e555ba96b9924d31387255d214ede89c603ae0bc7a576c194789ea493ac40f6799d99ff7f7576ef94a3a169ab6a3784b1253e46c42307ad967e051ecdeb7b1fc913b6985d2c5832cc729a3d54681cf9223090385d217534d5a4b6321532380afe9081d50f9ce0e1b18d3935c0372d89a016d4cadecfcdda0f71c66ba069f7df223f84e26cf5ef32486753f5611f58a7fff4e09a8e1e26f2cd73775c4aad9881c3bca27a2d8b255a0b08b43a780bc58717124ac5b32feea1ca9cf4caaf4d77e8bdb0409a0b96f37c7c9c6ddb45483d5f02b558ed77914fbf7299904f60db0fc37acd95397a5c6dbe99854106744d3e7c463d7895d60e3ad3b768587c1e122e4ca0a249a437fa864dfdbc8b91eb39f7d885993c261d68f57463f4fcb94391a6ddd6e85b702f28532346e07d5731a3671cb9c50416fb0ab07a64b0f80828afe56cd772b2ae738f0cef0e2f00ffb5c4e49b4022450969aced7372f0f7c4d43b0e9e9caabdc4f12d59061abd5b1df1762b14f97537937f7c5e4c8daf10e7f00bca3f471183d11d4dd22dd17d333c175f31072157e1c5cfd93ddeff02c777ad74df2971e209e0ee470287623cd08103a0e6cfc076d0b90ba45a8fb2cc32b75a1508fc6c0ecbe68c7ab1ca1055ba92114bcc6c01a528a105b21093ab68041ca05744bd8fc802d3b78aca5f9847ec660ff312b2a494288890d29590aba077b8b0a6a9873c8f72f792cb562a89218acb1ab2b32a66c842f3ada780af28b40e8265f8ecbd82dc71d80758f9ae4629f82ffc97aa89fa5f60d7d7f35d8fbf142c1c24b053443f74e12c24052106b0f1249fd66f538cea40e4b7a0ec6251f76b61e991068412e09bdba0929e7ff10aa85e1913b2c4c4924aa6756a67eeed7eb951eeba426c94a29364a708f65be2e03f08cc4227808b54855857f414eb689be69bf117926efa2ad7f04ef2181bfa4189301befca7e016a022a6712637bd82c186ee5c33bbbe550525be045fc861c0cfc01f2ee77aea91340d9aaa64a44b13bd6c15afc091afe9b86878596f4e468fb0f6d652c08ff44b2705280e1de8d87d31fa43713a884e67f470e5613b62c90a95fdaffc4762dc09977453627717d20b78dec3a0892ab70eab7524e8a91140d4b969f43da9357ef62ebc9f96957186c37d67958fafc5b15578f88eb3445a1f715002aa069532c9981a81ab73a5ed8d87f197d42b1f4abf43f23e51ca2372a500e82fd5d1388df19bc2cc1f9199812e3f6075191baba809bbcfdbad5adcd9b35ddfc009392115f2659b6aa6fa1c960c093e837316c379467fe0723dbd70103e997acd", 0xe00) 18:27:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffffe, 0x7fffffff}, 0x8) r1 = epoll_create1(0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}) timerfd_create(0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r3, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r5, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 18:27:59 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x101842, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) unlink(&(0x7f0000000240)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0xe00) 18:27:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffffe, 0x7fffffff}, 0x8) r1 = epoll_create1(0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}) timerfd_create(0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x10000000004e24, @broadcast}, 0x10) bind$inet(r3, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r5, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 18:27:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 104.713090] SELinux: ebitmap: map size 1077936215 does not match my size 64 (high bit was 0) [ 104.727323] ISOFS: Unable to identify CD-ROM format. 18:27:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x101842, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x4001, 0x0) unlink(&(0x7f0000000240)='./file0\x00') write(r0, &(0x7f0000000600)="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", 0xe00) 18:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@dstopts, 0x8) 18:27:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x2000000011, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_flags=0x1}) 18:27:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0xf09, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 18:27:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 104.991944] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 105.048879] SELinux: ebitmap: map size 1077936215 does not match my size 64 (high bit was 0) 18:27:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:27:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0xf09, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 18:27:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x2000000011, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_flags=0x1}) 18:27:59 executing program 2: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) 18:27:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:27:59 executing program 0: socket(0x2, 0x80000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") r2 = request_key(&(0x7f0000000540)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r0, &(0x7f0000000480)) getgid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 18:27:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @remote}, 0x5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) 18:28:00 executing program 2: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) 18:28:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0xf09, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 18:28:00 executing program 2: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) 18:28:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @remote}, 0x5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) 18:28:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0xf09, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 18:28:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x2000000011, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_flags=0x1}) 18:28:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75702fc859ed7379", 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x254800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'lo\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f00000004c0)=0x14) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000400)=""/192, &(0x7f00000002c0)=0xc0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000280), 0x800) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 18:28:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:28:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:28:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @remote}, 0x5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) 18:28:00 executing program 2: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) 18:28:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @remote}, 0x5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) 18:28:00 executing program 7: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) 18:28:00 executing program 2: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) 18:28:00 executing program 0: socket(0x2, 0x80000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") r2 = request_key(&(0x7f0000000540)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r0, &(0x7f0000000480)) getgid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 18:28:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x2000000011, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_flags=0x1}) 18:28:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) recvfrom(r1, &(0x7f0000000000)=""/39, 0x27, 0x0, &(0x7f0000000040)=@pppol2tp, 0x80) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f00000000c0)="580000001500add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 18:28:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:28:00 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) [ 105.466200] binder: release 8157:8160 transaction 15 out, still active [ 105.483053] binder: unexpected work type, 4, not freed [ 105.500586] binder: invalid inc weak node for 16 18:28:00 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) 18:28:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) [ 105.500597] binder: 8157:8168 IncRefs 0 refcount change on invalid ref 1 ret -22 18:28:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) recvfrom(r1, &(0x7f0000000000)=""/39, 0x27, 0x0, &(0x7f0000000040)=@pppol2tp, 0x80) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f00000000c0)="580000001500add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 18:28:00 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) 18:28:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) [ 105.500603] binder: 8157:8168 unknown command -1757450220 [ 105.500611] binder: 8157:8168 ioctl c0306201 200001c0 returned -22 [ 105.607200] binder: undelivered TRANSACTION_COMPLETE 18:28:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:28:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:28:00 executing program 7: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) 18:28:00 executing program 0: socket(0x2, 0x80000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") r2 = request_key(&(0x7f0000000540)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r0, &(0x7f0000000480)) getgid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) [ 105.634533] binder: BINDER_SET_CONTEXT_MGR already set [ 105.642391] binder: 8157:8168 ioctl 40046207 0 returned -16 [ 105.652066] binder_alloc: 8157: binder_alloc_buf, no vma [ 105.657954] binder: 8157:8160 transaction failed 29189/-3, size 24-8 line 3136 [ 105.667789] binder: send failed reply for transaction 15, target dead [ 105.674657] binder: undelivered TRANSACTION_ERROR: 29189 18:28:00 executing program 2: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) 18:28:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) 18:28:00 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800bc20c4a103f22, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x2) 18:28:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) recvfrom(r1, &(0x7f0000000000)=""/39, 0x27, 0x0, &(0x7f0000000040)=@pppol2tp, 0x80) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f00000000c0)="580000001500add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 105.773354] binder: release 8204:8209 transaction 20 out, still active [ 105.801129] binder: unexpected work type, 4, not freed [ 105.809308] binder: invalid inc weak node for 21 18:28:00 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) 18:28:00 executing program 5: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) [ 105.809318] binder: 8204:8217 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 105.809329] binder: 8204:8217 unknown command -1757450220 [ 105.809380] binder: 8204:8217 ioctl c0306201 200001c0 returned -22 [ 105.839381] binder: undelivered TRANSACTION_COMPLETE 18:28:00 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) rmdir(&(0x7f0000000380)='./file0\x00') 18:28:00 executing program 7: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) 18:28:00 executing program 2: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) [ 105.895700] binder: send failed reply for transaction 20, target dead 18:28:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) recvfrom(r1, &(0x7f0000000000)=""/39, 0x27, 0x0, &(0x7f0000000040)=@pppol2tp, 0x80) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f00000000c0)="580000001500add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 18:28:00 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 18:28:00 executing program 7: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) 18:28:00 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) rmdir(&(0x7f0000000380)='./file0\x00') 18:28:00 executing program 0: socket(0x2, 0x80000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") r2 = request_key(&(0x7f0000000540)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000300)=0xc) fstat(r0, &(0x7f0000000480)) getgid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) socket$inet_tcp(0x2, 0x1, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) [ 106.038880] binder: release 8251:8254 transaction 24 out, still active [ 106.040872] binder: BINDER_SET_CONTEXT_MGR already set [ 106.040878] binder: 8252:8255 ioctl 40046207 0 returned -16 [ 106.041114] binder: release 8252:8255 transaction 27 out, still active [ 106.041118] binder: unexpected work type, 4, not freed [ 106.041121] binder: undelivered TRANSACTION_COMPLETE [ 106.041228] binder: 8252:8255 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 106.041234] binder: 8252:8255 unknown command -1757450220 18:28:00 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) [ 106.041240] binder: 8252:8255 ioctl c0306201 200001c0 returned -22 [ 106.093439] binder: unexpected work type, 4, not freed [ 106.098903] binder: undelivered TRANSACTION_COMPLETE [ 106.122868] binder: 8251:8259 unknown command -1757450220 18:28:01 executing program 5: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) 18:28:01 executing program 2: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) [ 106.145304] binder: 8251:8259 ioctl c0306201 200001c0 returned -22 [ 106.170646] binder: send failed reply for transaction 24, target dead [ 106.180875] binder: send failed reply for transaction 27, target dead [ 106.225310] binder: release 8265:8268 transaction 31 out, still active [ 106.246533] binder: unexpected work type, 4, not freed [ 106.256685] binder: BINDER_SET_CONTEXT_MGR already set 18:28:01 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) rmdir(&(0x7f0000000380)='./file0\x00') 18:28:01 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:01 executing program 7: ioprio_set$pid(0x1, 0x0, 0x0) clone(0x80000000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000380)) 18:28:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000038c0), 0xc02) dup2(r1, r0) [ 106.256693] binder: 8266:8269 ioctl 40046207 0 returned -16 [ 106.256959] binder: release 8266:8269 transaction 34 out, still active [ 106.256963] binder: unexpected work type, 4, not freed [ 106.256965] binder: undelivered TRANSACTION_COMPLETE [ 106.257066] binder: 8266:8269 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 106.257071] binder: 8266:8269 unknown command -1757450220 [ 106.257078] binder: 8266:8269 ioctl c0306201 200001c0 returned -22 [ 106.272579] binder: invalid inc weak node for 32 18:28:01 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20001, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000003c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) fstat(r1, &(0x7f0000000480)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r4}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x0, 0x0, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000600)={0x7, 0x70, 0x9d, 0x2, 0x2, 0x7fff, 0x0, 0x2, 0x12, 0xe, 0x0, 0x8, 0x8, 0x6, 0xe0a, 0x6, 0x6, 0x6, 0x1f, 0x4a7f5d1e, 0x95, 0x80000000, 0x0, 0x8e, 0x800, 0x0, 0xffffffffffffffff, 0x101, 0x6, 0x0, 0x7fff, 0x101, 0x0, 0xffffffffffffc056, 0x100000000, 0x400, 0x8f, 0x8, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x2010, 0xe63, 0xbe84, 0x7d4c6bc15dfd257, 0xffff, 0x1, 0x6}, r4, 0xc, r1, 0x2) 18:28:01 executing program 7: ioprio_set$pid(0x1, 0x0, 0x0) clone(0x80000000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000380)) 18:28:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = inotify_init1(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800002, 0x11, r5, 0x0) write$eventfd(r5, &(0x7f0000000040), 0x8) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x1000003, 0x0) 18:28:01 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000001440)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, &(0x7f0000000100)) rmdir(&(0x7f0000000380)='./file0\x00') [ 106.272588] binder: 8265:8283 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 106.272594] binder: 8265:8283 unknown command -1757450220 [ 106.272602] binder: 8265:8283 ioctl c0306201 200001c0 returned -22 [ 106.416826] binder: undelivered TRANSACTION_COMPLETE 18:28:01 executing program 5: open(&(0x7f0000011000)='./bus\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304400100000014703f9725635cefcf2e54db1d24debbff79cad292c565211aebd186da197ba865c2fd184e7d164b65bb52cc5c2dc281690098825d690fd99896823ac1ed76614f3685dc"], 0x0, 0x0, &(0x7f00000005c0)}) 18:28:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000038c0), 0xc02) dup2(r1, r0) [ 106.448246] binder: send failed reply for transaction 31, target dead [ 106.455002] binder: send failed reply for transaction 34, target dead 18:28:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) [ 106.522883] binder: release 8316:8331 transaction 38 out, still active 18:28:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = inotify_init1(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800002, 0x11, r5, 0x0) write$eventfd(r5, &(0x7f0000000040), 0x8) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x1000003, 0x0) [ 106.570885] binder: 8316:8342 unknown command -1757450220 [ 106.578240] binder: unexpected work type, 4, not freed 18:28:01 executing program 7: ioprio_set$pid(0x1, 0x0, 0x0) clone(0x80000000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000380)) 18:28:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000038c0), 0xc02) dup2(r1, r0) 18:28:01 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) [ 106.578243] binder: undelivered TRANSACTION_COMPLETE [ 106.627352] binder: 8316:8342 ioctl c0306201 200001c0 returned -22 18:28:01 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) [ 106.674264] binder: send failed reply for transaction 38, target dead 18:28:01 executing program 7: ioprio_set$pid(0x1, 0x0, 0x0) clone(0x80000000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000380)) 18:28:01 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)="32469376ea0f57fcbe0b04101b85b8a8f256c468", 0x1) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='#!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000180), &(0x7f00000003c0), 0x1000) 18:28:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = inotify_init1(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800002, 0x11, r5, 0x0) write$eventfd(r5, &(0x7f0000000040), 0x8) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x1000003, 0x0) 18:28:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000038c0), 0xc02) dup2(r1, r0) [ 106.695120] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 106.695124] FAT-fs (loop6): Filesystem has been set read-only 18:28:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)="32469376ea0f57fcbe0b04101b85b8a8f256c468", 0x1) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='#!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000180), &(0x7f00000003c0), 0x1000) 18:28:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 18:28:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = inotify_init1(0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x800002, 0x11, r5, 0x0) write$eventfd(r5, &(0x7f0000000040), 0x8) waitid(0x0, 0x0, &(0x7f0000001ff0), 0x1000003, 0x0) 18:28:01 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005e7ffffff000d0000000210001f01000000ec0002c91300010000000900000000005867000043050b", 0x2f}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) 18:28:01 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:01 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 18:28:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)="32469376ea0f57fcbe0b04101b85b8a8f256c468", 0x1) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='#!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000180), &(0x7f00000003c0), 0x1000) 18:28:01 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'bond_slave_0\x00'}) 18:28:01 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:01 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:01 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000005c0)=""/246) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)="000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) 18:28:01 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005e7ffffff000d0000000210001f01000000ec0002c91300010000000900000000005867000043050b", 0x2f}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) 18:28:01 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'bond_slave_0\x00'}) 18:28:01 executing program 4: syslog(0x3, 0x0, 0x0) 18:28:01 executing program 1: r0 = memfd_create(&(0x7f0000000040)="32469376ea0f57fcbe0b04101b85b8a8f256c468", 0x1) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='#!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000180), &(0x7f00000003c0), 0x1000) 18:28:01 executing program 4: syslog(0x3, 0x0, 0x0) 18:28:02 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x473e) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000005900)=0x14, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 18:28:02 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'bond_slave_0\x00'}) 18:28:02 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005e7ffffff000d0000000210001f01000000ec0002c91300010000000900000000005867000043050b", 0x2f}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) 18:28:02 executing program 4: syslog(0x3, 0x0, 0x0) 18:28:02 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:02 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x473e) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000005900)=0x14, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 18:28:02 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'bond_slave_0\x00'}) 18:28:02 executing program 3: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005e7ffffff000d0000000210001f01000000ec0002c91300010000000900000000005867000043050b", 0x2f}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) 18:28:02 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000005c0)=""/246) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)="000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) 18:28:02 executing program 4: syslog(0x3, 0x0, 0x0) 18:28:02 executing program 6: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:02 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e23, @broadcast}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = socket(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) keyctl$join(0x1, 0x0) fallocate(r2, 0x1, 0x800000, 0x8) statfs(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)=""/229) personality(0x0) r3 = getegid() r4 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000002c0)=0x80000000) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x7, &(0x7f0000000480)=[r3, r4, r5, r6, 0x0, r7, 0x0]) dup2(r1, r0) 18:28:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)) 18:28:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 18:28:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 18:28:02 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x473e) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000005900)=0x14, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 18:28:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)) 18:28:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 18:28:02 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x473e) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x140042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000005900)=0x14, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) [ 107.829945] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 107.857205] FAT-fs (loop5): Filesystem has been set read-only 18:28:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 108.647033] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 108.654961] FAT-fs (loop6): Filesystem has been set read-only 18:28:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0) fallocate(r1, 0x40, 0x0, 0x102) 18:28:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)) 18:28:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 18:28:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bpq0\x00', 0x400}) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 18:28:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 18:28:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000005c0)=""/246) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)="000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) 18:28:03 executing program 6: r0 = socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x108, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff0001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @remote}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x840}, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKRRPART(r2, 0x125f, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') sendfile(r3, r4, &(0x7f0000000000), 0x80000002) 18:28:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffa}}) 18:28:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)) 18:28:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 18:28:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0) fallocate(r1, 0x40, 0x0, 0x102) 18:28:03 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x4, 0x2}, 0x10}}, 0x0) 18:28:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) timerfd_create(0x6, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f00000000c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x1747d47d2000f5fd, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = dup2(r0, 0xffffffffffffffff) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000400)="506764ea9a143d8f9f91cd159d3cce4e9c9a0ffb0138d990eb0cc68914a05132f1e0b81c7649f7bf10c369dec374fe326bb247534113c8e7b4351d83f564c674576cdb12016d26ef3c") ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xfffffffffffffffc) r4 = socket$inet(0x2, 0x200000002, 0x10000000000) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f00000002c0)=""/152, 0x98}], 0x2) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2, 0x5}}}, 0x3a) close(r5) close(r4) [ 108.836595] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 108.843023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2362 sclass=netlink_route_socket pig=8553 comm=syz-executor6 [ 108.873121] FAT-fs (loop5): Filesystem has been set read-only 18:28:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0) fallocate(r1, 0x40, 0x0, 0x102) 18:28:03 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 18:28:03 executing program 6: r0 = socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x108, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff0001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @remote}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x840}, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKRRPART(r2, 0x125f, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') sendfile(r3, r4, &(0x7f0000000000), 0x80000002) 18:28:03 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0xfffffffffffffffd, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x30) [ 108.882389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2362 sclass=netlink_route_socket pig=8577 comm=syz-executor6 18:28:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000005c0)=""/246) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000180)="000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) 18:28:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = memfd_create(&(0x7f00000001c0)="65553027776c616e300025269369ac1ec312098f21e4d336d86dc67c42199ea36b772c0fbb174379bcb92fbdebed73563d05448f9d38ff19318e681b20ac6f9a3339876255a93a957ce862040d69430605d078a97297d0f747d30706000000c306d51d7a5efbd105b8e13ebc86915fa968f72d6bc2c4c0e44952721c2ca866172c0adf0000000000000000000000", 0x0) fallocate(r1, 0x40, 0x0, 0x102) 18:28:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bpq0\x00', 0x400}) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 18:28:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffa}}) 18:28:03 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 18:28:03 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0xfffffffffffffffd, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x30) 18:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x11770a5b82b8b30}, 0x3c76) 18:28:03 executing program 6: r0 = socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x108, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff0001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @remote}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x840}, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKRRPART(r2, 0x125f, 0x0) gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') sendfile(r3, r4, &(0x7f0000000000), 0x80000002) 18:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x11770a5b82b8b30}, 0x3c76) 18:28:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffa}}) 18:28:03 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0xfffffffffffffffd, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x30) [ 109.114529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2362 sclass=netlink_route_socket pig=8626 comm=syz-executor6 [ 109.699595] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080 [ 109.707875] IP: [] l2tp_session_create+0xc60/0x16f0 [ 109.714562] PGD 1ca444067 [ 109.717209] PUD 1cf405067 PMD 0 [ 109.720707] [ 109.722344] Oops: 0002 [#1] PREEMPT SMP KASAN [ 109.726817] Dumping ftrace buffer: [ 109.730333] (ftrace buffer empty) [ 109.734020] Modules linked in: [ 109.737310] CPU: 1 PID: 8643 Comm: syz-executor3 Not tainted 4.9.118-g47b77b8 #20 [ 109.744906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 109.754238] task: ffff88019fb83000 task.stack: ffff8801d3ce0000 [ 109.760270] RIP: 0010:[] [] l2tp_session_create+0xc60/0x16f0 [ 109.769392] RSP: 0018:ffff8801d3ce7ac0 EFLAGS: 00010246 [ 109.774827] RAX: 0000000000000000 RBX: ffff8801d055a000 RCX: 1ffff10033f7071d [ 109.782074] RDX: 1ffff10039666ba0 RSI: ffff88019fb838c8 RDI: ffff8801cb335d00 [ 109.789333] RBP: ffff8801d3ce7b60 R08: ffff88019fb838e8 R09: 0000000000000000 [ 109.796582] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801cb335bd8 [ 109.803829] R13: 0000000000000000 R14: ffff8801cb335b80 R15: 0000000000000000 [ 109.811083] FS: 00007f33aa9ac700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 109.819293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.825152] CR2: 0000000000000080 CR3: 00000001d7984000 CR4: 00000000001606f0 [ 109.832402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.839650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.846893] Stack: [ 109.849016] ffffffff836c3e97 ffffffff836c4f31 ffff8801a1ec2a48 0000000000000000 [ 109.857010] ffff8801cb335b80 ffff8801d055a158 ffff8801cb335bd8 ffff8801d055a150 [ 109.865006] ffff8801d055a0b0 ffff8801cb335ba0 ffff8801a1ec2200 0000000000000000 [ 109.873035] Call Trace: [ 109.875600] [] ? l2tp_session_create+0xed7/0x16f0 [ 109.882071] [] ? l2tp_session_get+0x1d1/0x790 [ 109.888193] [] pppol2tp_connect+0x10d7/0x18f0 [ 109.894327] [] ? pppol2tp_seq_show+0xc30/0xc30 [ 109.900550] [] ? security_socket_connect+0x8f/0xc0 [ 109.907120] [] SYSC_connect+0x1b8/0x300 [ 109.912719] [] ? SYSC_bind+0x280/0x280 [ 109.918233] [] ? get_unused_fd_flags+0xd0/0xd0 [ 109.924440] [] ? do_futex+0x17c0/0x17c0 [ 109.930036] [] ? SyS_socket+0x121/0x1b0 [ 109.935642] [] ? move_addr_to_kernel+0x50/0x50 [ 109.941855] [] SyS_connect+0x24/0x30 [ 109.947191] [] ? SyS_accept+0x30/0x30 [ 109.952617] [] do_syscall_64+0x1a6/0x490 [ 109.958304] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 109.965203] Code: 00 00 49 8d be 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 7b 09 00 00 49 8b 86 80 01 00 00 ff 80 80 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 55 d0 [ 109.992138] RIP [] l2tp_session_create+0xc60/0x16f0 [ 109.998908] RSP [ 110.002508] CR2: 0000000000000080 [ 110.006405] ---[ end trace 35ea6ad90e01c118 ]--- [ 110.011163] Kernel panic - not syncing: Fatal exception [ 110.017157] Dumping ftrace buffer: [ 110.020677] (ftrace buffer empty) [ 110.024362] Kernel Offset: disabled [ 110.027965] Rebooting in 86400 seconds..