nspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:43 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:43 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:43 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0389b2b627402b43bccb948a9dfbd2607d4a35ade2bb4e517a74dec92015639ce0f5a94aa56d8902d3276a5d807439b5a8c677eaa540019cea2085609671331cf3e54ed782e22f707be378cf0675c2c8d500436e6d7e07bcc3", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000001000), 0x1000) r2 = dup2(r0, r0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x12, 0x1000, &(0x7f00000040c0)="70be50eda3538569f04b110b8df8d212608dd9dcb26ea819a6bdea6a881350062dec6794e3f7e3c8818686abc4355e7d28f3d931f5f367d828639fd0db59b0a4e233a071073b554b61a96abc686f028fb63b898dbe3b029164efe7caf61455f386a9db6a48215fa4201193f0afb71db1c6faf48f524e06dfccb3dce61b5ca0b2a913030fe315d2891145f0aa23fa5c08d06bc61d92ad70710c06e882d36350907bfa0ff7c63d266727fc01410b64aaf3322ac412402302f51f87604c805e8213c630da9f6168d3a9442e19ad082eecd84bfc7c5b9a1b2cd8d732795691f8b1fcfa32ae45027a15ca064f4138e06c6e8125e044be9b0b61847d43031f34af762323c57394b54f2dccb1d4766dfa13f49165c7f42cb24381d790c3aec8e4612839eba5c11e13641489fdfb343368864727746034886bbebf616ae780e5079869a005e2243bc547b6f17c454d388539245f673575d339f6dc30fe9e94db79093a36ab0aefc29652112ccc7918386a85979c28a1cbf7207eeb04d88b89ac742c8e1a999fe60ca2eff3e4c9e8992b61d996f456b0400c810077233889b473d173510bd4579d59abe482fbd78b0a437ede87f09ef77cc5655f16765d3b86cb136b331c8dca953f764b1ddbac9a5d580a19d3372eefc2732f40e3560b4634e43cb213f2dd2011d69e8e3b40c175b7083b948164b22272da89be45a954a44a13995eb6a32f079c930f167f404e9e5866bc15a4206ec833fd968877972a3148af22a3da6b7b0b07f5c99c6407382735e2e5d84777106d88f08e8e488d580370f6fc3e868a95e2de3c442f09e7ed1e09b45837e3f0c7191509109aeeee87c4e8fcbe0a4a951db8221926bf60cc7c0fa922d44b1b9bc385e7a1313f6bb8eab7e3a14bba8cc4899035aeee04466d8a5e374ee2d3a9b70d73d0dbff09c81b4869b97485127d7828f6224748d74cd9cca2461ce2d30208465ee55c94ae75e6ebbe560058d3d20e997962c4e6c5033787f02c3682311cf9168259e78e7d2bea8e888078b5abcc7d4b32ffa58801caf49cfcf157de99bae45ea33da4840eff4846a9f78a6c8b24fc5ec21a3917b0256ca656e655784451e9cef31adcb6120c9ec7aeebd9c43e296a50486894656a32bbc643df51de0f7b2568f766a111f5743c39b17dc6da97d441a9bfb38a6ba4594edc9a3c51626ac0ac6bdaa07a47a5b4872bf03d3d63cf5b06b53baeca593d679fc3fd31e210b39baf5c11e4d55da797f0902ad88e84fd85074085a4fa0546c869b31eea4c2793e10124bd19a06cae66b0540a443fe64b74af9931af9523b6fb446195a13eaeaa72e4ae9eca5c3e25084b77617dbf261d09ae1236207cafa6db415f03f7c086ef70fbaf64718342d1c9dcc2119da162104bb699fd8efbd78261f5d327b4e2514ba0222e8c3f81a6ff24027d5070c2ca30a48f3bfcfde9880609d7d350ed7569f47cc3f4da877f992e2783a82d21f9c0ab60dfb363339128d4edb8392406f5f29876575a13bb97d448c13d02fa281b03f20158467ace052f4d3636b1f1bab85a5cfc87631c993d49b14eaef327aed5af190eefb4076db090c7e502268457fa5308efc9cfe8384553d0d591d00bad5385eb1e17bb6407ae72c2aecf18c50dbe66cb749574c87632894ed3216c2415e78aad1d77e303f95dcf769553ce5ebf9c77ca3b3cc9ae3bc03011a483094a926048f83f8f9dd1b7f01b9ef1845a2183520b41b8cd33fad752bb1b5ec5f843a4437a13b4f98ce5136087883e533afa607f740cc7582a69d88d059f9ea95e8c9c3af5cfc4c91950d48859f2d8f1a4c36c5296cd38ebed21589298feedf596295145493b03163d579e6d449d65ae73d563a32bdda577620c4bc20e53be7b40ba9cbca1be15c28a5ab844999e3c5d39f35106b4bed65ffc841e52132f967de0a97c26447f595a497e55b1ed6f1ef404d97d261a0103dce3cee324c29d66adb0115d1b397c734012377d9eb0858c9bd5af5d8c620111870f210519a3e7fee881958be8563b0d1d542853e1d7e39cb0bba87578514b5a8851847d410383fec1440c9c236bd2d0f177777994fd97b067803a2da214e4a89ba181a61598b28f82af33b0084f9049f952d7f4dd98848412e4e38fccd65c14d8b6a5857f0eed39935e7e3947cbe8bc618ad9fffc4301e3ff3e00ca4be467b47367e3ad13ad613d505222839270a07b4b210e9d0739733f4cf98dead834b937b37aaedae13f0d7928c01176c6b476943e74f00822446f4991a3f59dee0841e1444ec9dc5f44bea1baada9b61c37594d125bf96da7581d0769cdcd1fe51bc0424e35d0fdeee014f2c72125d33ed17ae0b63f175f0bf8b0559fd2b70750b4b0d3ce53cdce52e671c28e95fdca617e64595701dd273567da1db0da3b4de64552c27139ee659d9325918fd76a7e24925f3b0e8fbf340e08e98624459b07ef2b5b9c9fdab0bdcc65d22881732e8eb38d32fb6300a93019d74782a747bdf216d4c426bec2c80a7e2b6ca5f036faca1a79f4d3f8dcb00255f5a44108f21d1bb1110625850fc5992f0de884ec4ad061134324f751441fd4c8b29fe69872d6758fd4286daf45f8605923983938909dd164ebe8b2c3988e0f626a7e61b4232190ebd27bcebea84d7d0dc1e218a81e402f93bdcc0afa94225135511caf467e1afc4ce96f443b33b48b05a545139d931f1268211ed680a5d33e428c45c3669c85c9fe1b77f142c38bd96e5fb72c965a6e73a80fca725d280c1268f123cffc82e7047f1f54c455db202f3b65fd57fd59566292659ead0bef8fa0520db11a956954909825953c1edc73e3f7ab6e963636a3b7406b9f9baed7574e6d51f16efd30d0baf1b49eba0a8506c3d300d630033dd3a54851e1e17be615aae161c81c6199ac721c66d47c247c5af105d9f36585158e418783e2f89cfd885997c7be4f0527777375f7ecc099d3eb346d7b412196cc22dec41f1e22bf863ad6f9dda7aa1d1c206aa7c000c169681d0d1d4fa411c0325d685bd48edd5898a749c10ea5e257a8e88b14fb723f72de4135ff978f6d026902ad6cec65ba654ad1bcc579e5920c2b7df8472158d1512f7fb57d50056e8377124b7d74b0b66633ccad1ddda849d08bf85d7ceaf00ec027056b562692dd7ca639033bd86d661f4f49c788596c6725ca793c7d53a8ede2dced7e806700783bbb3c936213064c7c353c7fdca8000e68ee3df36cf03f6dee7ba5a934de148003fbfb3138550ef6bbe7ac3b2aad1d860a3e8bb9ea9b14521b694cb33d07f258f3cb17d0057ca1e20ce3b168f9ee5f18ab211c7e6de21f82d24cba55be6af03fc333b62a01a8f34fc04303040bb4fde96953be39b28846dce48891b801658397e117e73ae49b93f89e1a6b7303c291ac04de4e0e7962f913ec1d32d757a992922c280afccf38f2c38491b20ae79e7d28e0d8de9182955a14ff5eab2bdf5db21e23aafce2e430d41c69df3ee11ffbb2b991a408fe1df9426e5eb3b1d96f00f6516710bb8b1b48f5eba3e3793abd73d5d85c97a286ecaa1ca99ad4db4e6dce6c0afa44dde15d9b2a2892b61a300ac62a6614c1853aafd9054910070faade94d49768d762e60236629d96fb8d0e9a58ad1103ebff7a518c1963d1db17e8a128041be061a01d1f89482042ab099fc0ee2188c1485cb0f69ab8bfbf80c7a9146885964e4ed85de90c7dcd59299b28a6b0d8ee7093eda8de9f62fdd5c606d704e2e501263cf9078b946ac1c2fa32731aca81e4308d8a04a0b818b875f80b714cf72816c2921fd5915b5a95117577c99f15f997baa39c7ff4bbf88c976fc51f8629c014f502b7a3b1a0b7199b3a35a4098608cf3a4314a4a3e4f23d8487ed5c31c30d72ecee0c64d2abd69b0606fc72e814e24ef9509ccf868d8867c9e51978d14de0d7415e440f73526482f36c90a0c853607835783d2503b66c7b58126b98800f34aede270c03ae5f906b7cdcb42d8887dda4226035ded1f34523c49b66e4342d362ab73cee3a53bff339b31ba39f410e8f2ae6599d1e70c7762afc302a8a06c0675d44fddbbfc4fce735f5fbffa4511576ee848b42454d297a6c49fed3cf06bb31dce96bc526feec951ee5820231852268f040b1f6e3a29fe7862b0ead6f7b0d2275b0485e8f80419a259c26600560ab0fd338de118cb7b1dd2ce2cbca36348f55bdcb70cd9d27e70bb9cf9a73d1d484132967b43b692cf77c9ca22cf237098c1ee9e7227ef84037dc9057f0faf01ec27011503afc86c6cbbfc3b839dd531c7ba60e77034d6b0879510cf97cf001164f75c0b020f0c7a5cd6664e19e9770fd7a718422325a2155d7d2d65b96f48b9432c8c653e72629fcf1cdee1e2db6232d7fd845b4deec5027c6dfe9063dd624570a0592c25ac2dbe470688e0d8e6a116ead188a6fc33bfbb99af009e01760345030277c1ec9388a98c946f83c04a6de3825acdec5e672457cb0c61167d70c6d28b4cd34c7e8e617b3175067f9fd6aa3598a3d4951e1cf156debbf293135ae6d5e9c95e4bd0df8542a39015aa563d0756de5425e22113bfb98357f36567df371e60c7ec551b918ac3d8ae5e07fd57178b3b985396661bbc6fe96b93f96d4a00d018b714f7771261eb058ef5188636147e747d932a46f0f8ee12161d13830037c69161260b1138341270105e87cbe9c762ad7636bc367c3a1675ce7029e1643a1f60549acc736d6fe064715575d49f3254ea1a5b5b5604bf8d5d38cd4f41ba09e380fced29651ad73deaf2ea9ce1fb5a77137e247f1076a352d49f25cfa9e2e3264cf254d02ace93fb12616491b4cb0e14485de05a42bcce7ea2935c2d5f1312f6616cacf3ffbc44339c1d38baccebb419b5edf8471b62339d6a65104839d9dabb1e8b423a2efff3fdde315bc595cbfb42dc6fad9e199ccbc51126ef655a507218ae3d3c6ea6556892413a1c835294dfa2c17e9673116df1699d2a8ca638206f79b1ca9c5eb5c445e66e51de44e43441b1a23002297d500a7604b7d8b78e969c1f2f71b1110b6fbc740bf4e439d0266370cbed3ded17fb0ab2833bad583f09070fa3d00ca1fffd1f099e4f8892f914d4c2d15ef30cf452e1635e2d76d47573912e8beb3f5efb2e612c49596450dd26ebd19df1e45d6e4bdb5ec2fbc2725bf20ccf6e7f89268e1ce0f0394add4fa920e2cacd65348805dce3e1684fc72df10d744130d4b31edca54c9d8b71753f08b155eaf3f5c7ead2c4beb0a18abdac883f3124ba0f1a1df339207a93e345f92edae0b58ca7323e7deeab8daceedf6d3b9900fe4554219a31a246586970aabfafc83404736c299ac5caad23aeb2409a0429775aff94cb150172d922eea3aa1c8cd256081d865fba6ba72b24a250f4f19fcb1a3b8af08be2f902a2be061a523ef485ed6a634553e234cb194fcbff6a4c191734d448a842497ea2ced350e143aaaf569442a7f77672bdac5cf8652238f5ecf9e4ed89e6466a2f564df6f243460d0a89f2159c2f15865ff40c8342566cf75114fd8d32c3fd0595a25e5b7f21838e6c2354ba35952bbfa2b83366cea964cea3d330532f6831a7e565cd4862cdb59bbd33526e6b9c2009139c22a9d658c0b6e912a4d6e7d12f3d05a9f2a9b38c179fa7e2a644a2ee8e2a84969c0519c9b2ffec11f12da7e1876cfd01d9cdef1170843849bd594c35be64470010e8ebb5adf9c2c2cea5611050195719fe3940e76d1d85b8332d38f7ebd677351043980eebe3e6578d74935fc08eaa5fa509560e169abd9b0de69b389e958fb4d7c3d4f58fbc8"}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/158) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000040c0), 0xffffffffffffffbf) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x280800, 0x0) write$selinux_context(r2, &(0x7f0000000080)='system_u:object_r:hald_cache_t:s0\x00', 0x22) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000002a00)) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) write$FUSE_GETXATTR(r1, &(0x7f0000002a40)={0x18, 0x0, 0x3, {0x400}}, 0x18) 03:39:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f857140") r1 = gettid() capget(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) r2 = dup2(r1, r0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x40) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x537951ef2e35769c) 03:39:44 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:44 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:44 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:44 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000002a00)) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$notify(r0, 0x402, 0x32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = getgid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) removexattr(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)=@random={'os2.', 'fd'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c678a6f75705f69643d2c8cc2e8d78d108c595860e7381b4a214c42c050c477596d54ff7095c10cedcce82dc698d49d0f3420da64f7181ac8aee3e0f448b09939dac6a50f4b6bb18adb29b390b32de05daafb3fe83e54cb6ecfd3c4315ef1f97bfb436ee081abed70d1a1bc58e4e6d55ed41e8356b5233ce99534accc2d047d60d31447fa53f84c37b21f7c14a89c4d4b10c1cba8276e65843b9ab1de42", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000001000), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f857140") r1 = gettid() capget(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) r2 = dup2(r1, r0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x40) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:45 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:45 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:45 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f0000000600)="1f5a8c6d2831ffff000000000000f83a5c2dab729192bb5daf010c504c809ba26f3ef4d2957d8763ff7e88c847c58cddb6ebbe69cb5000020000f313b1f34080ac260320ab2db622716c5d1c42fc72c77f000000a96e67ee7b9efebb7c47adc557eb4b5bd3f4121fc26c4845ef30729660fc341fca4e40af68a5e0868173c3d63f52b17edc95f8e2bdb9000000000000000000368c9a3abe117e588f92119d058cee8f6e27977f24378dc4257eaa193c31e01e379d8183f2979fb9be06bdb95ba2d9ceba911887b8e3332d9f2a1f00000000000000000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x9d3d31d83dc24aea) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:39:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000002a00)) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) 03:39:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) r2 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) close(r1) 03:39:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r1, &(0x7f0000001000), 0x1000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x800) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x100}}}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) close(r1) 03:39:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cca0b7a8d01003e0f83") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x8004, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) r3 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) close(r1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) sched_getattr(r4, &(0x7f0000000180), 0x30, 0x0) 03:39:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = gettid() capget(&(0x7f00000001c0)={0x0, r1}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) r2 = dup2(r1, r0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x40) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 03:39:46 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:46 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) r2 = dup2(r1, r0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x40) 03:39:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000380)=[0x2]) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r2 = gettid() r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000004c0)={0x40246f, {0xffffffbfffbff270}, 0x48000000}, &(0x7f0000000380), 0x8, &(0x7f00000003c0)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000300)={0x7e90, 0x1000, 0xc6, 0x2}) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') fchown(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x3, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000001c0)=0x80, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000002c0)={'ip6gre0\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[], 0x0) [ 799.712466] selinux_nlmsg_perm: 11 callbacks suppressed [ 799.712475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2050 comm=syz-executor0 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) dup2(r1, r0) 03:39:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000002a00)) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) [ 799.722871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2051 comm=syz-executor1 [ 799.745708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2052 comm=syz-executor4 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8911, &(0x7f00000001c0)="0a5c149bc8ffed315f85714070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:46 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:46 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000080)=0x8) 03:39:46 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = gettid() capget(&(0x7f00000001c0)={0x0, r1}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:47 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:47 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='fuse\x00', 0x1011000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303032303030302c757365725f69643d285d7befb0eb45592ec6b1e29d4babe0ffff0000000000000000000000", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,default_permissions,blksize=0x0000000000001000,default_permissions,\x00']) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:47 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 800.539640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2112 comm=syz-executor0 [ 800.569318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2115 comm=syz-executor1 03:39:49 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="49678d0a7570c7a0b539b5623b55010ef46d4e7ad6961c58080c5b14575f961831", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000380)=[0x2]) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r2 = gettid() r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000004c0)={0x40246f, {0xffffffbfffbff270}, 0x48000000}, &(0x7f0000000380), 0x8, &(0x7f00000003c0)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000300)={0x7e90, 0x1000, 0xc6, 0x2}) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') fchown(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x3, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000001c0)=0x80, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000002c0)={'ip6gre0\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[], 0x0) 03:39:49 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000002a00)) read$FUSE(r1, &(0x7f00000030c0), 0x115f) 03:39:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = gettid() capget(&(0x7f00000001c0)={0x0, r1}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:49 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:49 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x1}, 0x8, 0x800) dup3(r0, r1, 0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="46643debd3b5f54cce4ed338e77f0f6733e0dec9472f0566c3a69405cd5e0c68", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200, 0x10) mkdirat(r5, &(0x7f0000000500)='./file0\x00', 0x0) 03:39:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:49 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = dup3(r0, r0, 0x80000) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x80, 0x0, 0x6}}, 0x14) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x11, 0x4, 0x5}}, 0x14) accept(r2, &(0x7f0000000140)=@generic, &(0x7f00000000c0)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 802.896959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2151 comm=syz-executor1 [ 802.898093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2152 comm=syz-executor0 03:39:49 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1, 0x100) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0xc0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 802.919877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2156 comm=syz-executor4 03:39:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:49 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x40000, 0x11) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) 03:39:49 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$selinux_create(r0, &(0x7f0000000080)=@access={'system_u:object_r:auditd_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3f}, 0x56) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r2, r3/1000+10000}, {0x77359400}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000380)=[0x2]) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r2 = gettid() r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f00000004c0)={0x40246f, {0xffffffbfffbff270}, 0x48000000}, &(0x7f0000000380), 0x8, &(0x7f00000003c0)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000300)={0x7e90, 0x1000, 0xc6, 0x2}) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r5) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') fchown(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x3, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) accept4(0xffffffffffffffff, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000001c0)=0x80, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000002c0)={'ip6gre0\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000007c0)=ANY=[], 0x0) 03:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:52 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:52 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000002a00)) 03:39:52 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:52 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x20240) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000140)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fR\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, r3, r3) setresuid(0x0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x501000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x4, @remote, 0x5}}, 0x8, 0x18c, 0x8, "85487744d3264c00ec60b58934ab61d1d02c7eecb9244bef0bd94d6f20d1b317f8b546201ba5e97a661c704867c252c9c6894c8beb9b14315da99918c2ddc95e0b2524d20997d7aefdd5c216b2307336"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) mount$9p_xen(&(0x7f0000000180)='eth0em0}\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2000, &(0x7f0000000280)={'trans=xen,', {[{@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'illinois\x00'}}, {@mmap='mmap'}, {@mmap='mmap'}]}}) 03:39:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xabb0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000240)="81e28738134fc3121f268726b82d4e6302658a51925a22389a99b4c8a9ab855680727de52d8e1d4bafab0b81e527b58ff43af6ee0c86dc2db74908066867f6ced58d21a995", 0x45, 0xffffffffffffffe1}, {&(0x7f0000000340)="d13ea399dee0c1615f7937c8ab4e95cdd470f09e19fb1a0736fbffd16c7a4723baba60d5c32be928954136236ff380b4eb8f22e1a7ff594daa7fc7584a1c9976774794709d0fcdd62d96a560bc21d53eb330d934f149a1e19f5036bca5bc971b9e5d898786e1210d3ad9709016daad8ae80cc4a891224cc0fd76c0b887971c5e81b363bc272a1f74ed0c043fa9421cd8afd3ebc0dd1c7801af679a4d8f5952387aedf84d8a4d117fdeea12d3199dfe14828f9ac309279de185a8834bb936f8e8a958adb4c36502", 0xc7, 0x3}, {&(0x7f0000000540)="1b2c858b5bcb3583611a6619535af14826360422da56312338181829b2bebbb017ba8902cce1780bc6fad37c7466d8429e32df5b1c9a547d12dfcbcc842c61cf7ec7a2b166736ba992f107e9d132ab4bac1d6834821433c82f864342927898dc9e07799c05ff63b8f0d94f2efcbe337b4f3dc8286ad8b9d0db7e6ac9d8aea8ffd774d0bf244c3c98ad59407e3493e90453ffd72de69a9887b422d8a2bc5f757b6858daf87565c5a1db27e9fd3778047a8914e24467d22ee9ad4ab8c7ab637678549c689b0112e03961901564", 0xcc, 0x800}], 0x100800, &(0x7f00000002c0)={[{@utf8no='utf8=0'}, {@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6664953d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040r_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x20) 03:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) [ 805.963264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2222 comm=syz-executor0 [ 805.963642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2221 comm=syz-executor1 03:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB="6b647dc0a10d4ea4eccb02452bfe709d55a0c0122e7663ed07cf2208a32a81fd1ca4e6ce9c40a8e9c61bc91caa9ff6e93fb2abc3bded2a88dea87d8f030bf4bb25d9b5aee9d8ce7ee649038997f3a81ec12e2fcbd2fb671e77d1f90a7a5a77e41bf12f1469590e32a6382a60e048fb5653d6a49f4b12d10118f60aa1fc0352b3732e9bff153b8c8b78177b44daaaf6d67b5051828ffe07d094926e7da83314059b26044a0dfc4c4c99164b316ff11e03b13b40fec0348638a85ee5f54d9001d0bf9fb9da1290653d63ccd60c77c81d7aa623f4809cdaef5a90c041b0d524415531df7c609ed82378d64b8fed97d787de15507c1631417dde948eaa29b84b82038c6c2358ab257fdde3345121c1bce214d29b78ad67d59b138eb3e36f1328b98b783ef6d6c11057983b13c0e4d8aca1fde32726b4eb332cacea504e9194256afff7fc2610abc6c6e8225ef59b240c2f58056344b7b07637738105696c9e50806072910b5abb9334a1a468bcf18fc39cc3ff25968aa9d8993c27bc1e391d010557bf2a31afb484435a1aebce5fd87b830000000000000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pktcdvd/control\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000240)={@local, 0x62, r2}) [ 805.966151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2224 comm=syz-executor4 03:39:52 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x101000, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800104}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0xc4, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 03:39:52 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cfbffffff705f9169e80232f2a6d4cc39eaccf7150b2a1897ac07000000f95b740024dcff218d9162a2deecaab38887ab1605b3ccfebc3bec143f836ae774f557a3bfb4f49218f5bda38ff13e8319c1c5bc089140f652c476b57ce546c639e3b63397fdf7fa63664f9bc7fff18234889e450f63bd2b1d5a0eb9b9b5fd3e389920d3471d85b494a2bc59d3a28eccf0c38c1295594b28f08a03bd2a345be8f7fa3e007167497a2e42faf5378f03ae9212ca13b03071b0f00738bdac0a74d0e6", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:52 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x400) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB="6664f1", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:39:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/vga_arbiter\x00', 0x400, 0x0) 03:39:55 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:55 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:55 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:55 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:55 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:55 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0xb68) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:55 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 809.031380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2303 comm=syz-executor4 03:39:55 executing program 5: listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/121, 0x79) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@ipv4={[], [], @remote}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xffffffffffffff7f) mount$9p_xen(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="7472066e733d78656e2c63616368653d6d6d61702c6d73697afbdb3078303030183030303002000000000000002c64666c747569643d00000000000000e3e86efb34c736f7aad3879799015941f3e66af63f3d5b640092064eb4c9473a0a35c6f5a8cbef900a70d3628a1fc389", @ANYRESHEX=r1, @ANYBLOB=',dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6c6f6f73652c645410ffffffffffff3030303030303038303030303030312c00c9714dbd912ac55218f14c4ff789c36ff391d6e5d160722d40c04d90ac8c7c7fe8974ca9b01c8e81fec822b31729361fef1bc9ca98ad30d5b77c0000000000000000000000"]) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xffff, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB="2c67726f75705fd3a0a9", @ANYRESDEC=r2, @ANYBLOB=',allow_other,allow_other,allow_other,allow_other,blksize=0xcc11a8d67204fa98,\x00']) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') [ 809.045826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2301 comm=syz-executor1 03:39:55 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x400) timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000140)) ioctl$RTC_WIE_ON(r2, 0x700f) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 809.048732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2302 comm=syz-executor3 03:39:55 executing program 5: utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x3ff000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair(0x1, 0x80804, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r1, &(0x7f0000000240)={0x68, 0x29, 0x2, {0x3, [{{0x2, 0x4, 0x8}, 0x6, 0x2, 0x7, './file0'}, {{0x1, 0x4, 0x3}, 0x3e9c, 0xffff, 0x7, './file0'}, {{0xa0, 0x2, 0x6}, 0x8, 0x92, 0x7, './file0'}]}}, 0x68) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='nd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643da9", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) shutdown(r0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x42080, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x44800) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) [ 809.050997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2305 comm=syz-executor0 03:39:55 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) mknod$loop(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) gettid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$inet_udplite(0x2, 0x2, 0x88) [ 809.169195] 9pnet_virtio: no channels available for device fuse [ 809.195798] 9pnet_virtio: no channels available for device fuse 03:39:55 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = dup2(r0, r0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) 03:39:55 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x2}}, 0x18) 03:39:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:56 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = memfd_create(&(0x7f0000000480)='fd', 0x3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000006c0)={0x205, @time, 0x8, {0x5, 0x4}, 0xb5}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x40000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$key(0xf, 0x3, 0x2) accept4(r6, &(0x7f0000000340)=@pptp, &(0x7f00000001c0)=0x80, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6b}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x5}}]}}) futex(&(0x7f0000000040)=0x2, 0x3, 0x2, &(0x7f0000000140)={r4, r5+10000000}, &(0x7f0000000180)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2a081, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x7, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @loopback}, 0x100, 0x6, 0x40, 0x80000001, 0x4, &(0x7f00000000c0)='sit0\x00', 0x5487, 0xefb1, 0x200}) r2 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x80000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfffffffffffffc0c}}]}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000001c0)={'bridge0\x00'}) 03:39:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:56 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 03:39:56 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:56 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x0) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:56 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @local}, &(0x7f0000000080)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, r1}, 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='fd', 0x3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x9, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$selinux_validatetrans(r3, &(0x7f0000000240)={'system_u:object_r:dhcp_state_t:s0', 0x20, 'system_u:object_r:autofs_device_t:s0', 0x20, 0x5, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x73) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x404000, 0x0) 03:39:56 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 809.904138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2368 comm=syz-executor0 03:39:56 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 809.942219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2376 comm=syz-executor4 03:39:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x100) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {0x0, 0x7530}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000340)=0x5) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000240)=""/151) [ 809.944140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2371 comm=syz-executor1 03:39:56 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x14a62ca6) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="665faf", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x7}}, 0x18) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@remote, @multicast1}, &(0x7f00000000c0)=0xc) 03:39:56 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c7f6f6f746d6f64653d30303030303030303034303030302c757365725f69643d8b244df2edf5288a646d03016cef7e2b1343b8cc1b7eb15f39199f9a8d56045a9f807ddd23ea4e86de5983b3a9090e91ed39e264fff389960c9c621d119f0e0a89f35f4ef896a3b0e96d14a8ae54d25be3030e056104c6", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) utime(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x1, 0x9}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1a940, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xff) 03:39:56 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:39:56 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x2, 0x8}}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) r1 = dup(r0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:57 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x401, 0x7c) r1 = geteuid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}}) 03:39:57 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) recvmmsg(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000040)}, {&(0x7f0000000080)}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/83, 0x53}], 0x8, &(0x7f00000040c0)=""/4096, 0x1000, 0xe84}, 0x7f}, {{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/134, 0x86}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/118, 0x76}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f00000000c0)=""/61, 0x3d}], 0x6, &(0x7f0000000cc0)=""/184, 0xb8, 0x19}, 0x6}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/111, 0x6f}], 0x1, &(0x7f0000000e80)=""/241, 0xf1, 0x4}, 0x2}, {{&(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000020c0)=""/84, 0x54}, {&(0x7f0000002140)=""/135, 0x87}, {&(0x7f0000002200)=""/15, 0xf}, {&(0x7f0000002240)=""/196, 0xc4}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f0000002340)=""/68, 0x44}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000024c0)=""/16, 0x10}, {&(0x7f0000002500)=""/10, 0xa}], 0x9}, 0x6}], 0x4, 0x10002, 0x0) 03:39:57 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2a081, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x7, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @loopback}, 0x100, 0x6, 0x40, 0x80000001, 0x4, &(0x7f00000000c0)='sit0\x00', 0x5487, 0xefb1, 0x200}) r2 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x80000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfffffffffffffc0c}}]}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000001c0)={'bridge0\x00'}) 03:39:57 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fremovexattr(r0, &(0x7f0000000100)=@random={'osx.', 'rootmode'}) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) creat(&(0x7f0000000080)='./file0\x00', 0x10) 03:39:57 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x20000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/186) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f646508003030303030303030223030303030303032343030300e2c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570f700643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x42}}, 0x18) socketpair$inet(0x2, 0x80000, 0xffff, &(0x7f0000000080)) 03:39:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdlin0\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="fcf4884dc97b7ead26484b8a39450eb9bddd9ef0939f10b9869864c82accb129945e552c41e9bea9f25dc129f4f91fe515b06d254a165793fecdfa830aeaed8f5c2bda2b861b257ced1e59645042a4f2fe07a07cfbbe0c6b5001c70ecc08745eeb3097e878165106c6c43892172a2ea4b4036df45e4dd743aad6df52949eba93480aff614054d8ab8a77e62d1f0675f14cf1c16a1dfc776040321ab0b0902065ab778e5b17fbbdb58ff0eca63b3ae950db13b4965c2220696d4cadf753c8d2c326ce13af46a06a4aa4bc3557680aef1759bd5c8140", 0xd5}, {&(0x7f0000000080)="9f71212df3b596d6e94936ea73e301e18207e40afe153af71f4abc", 0x1b}, {&(0x7f00000003c0)="75d4b1062c3962b186db078fafb346a99e67ab26c2693cb446283fbe1b25816e69961d7a291e82a8b7e4b89f4c793a4ef29ff05d39213ad3061f9f46a61bc155abc9b1066e7f3a7815b363eb362cef4dfc3d2a09873f4da6a90e0a98bc124e4b97e337687960e6d7d7e1894e6065f61b1bf97a88b3fec71ff917644753fd4f5954c15b4137385b988e4b4af9f3f5b2d59a3fd458b76ead1fa5461c97284703", 0x9f}, {&(0x7f0000000480)="e6b5e6799570c9ead8ea32707daabf26c4d520bbfaffb28e4e6f6330abc2de144a2372b9012cb3dcc7d4230fec910c25ef34bd6ef93b3c667a6051e75d5cd7d4c54a8487d59c538e058b7309f015279aafe0d1bedf64de936e54dda603918d4cb1bc729a8e9ced3243d9223eac6d7992dac49de00f44303151b49eef407ed26b4dbd1b4b59069e7cef1d78de02b43c463b9e36776cd799dd5c4cdc1ce2", 0x9d}, {&(0x7f00000000c0)="43566fb1e4e672817ab7e515c6dd16fe16268e1debf83604dfaebb0621185ca302d43f9f82fb074fbbd3e3068d456018c715905eb0c5eb1f1de59b472bfe5689bb2cb2002117c6f2ecab41f9a6a92a9142136a4e9ef9625092ae315fa9601bfcecf2d3d226b1f1b80993d578", 0x6c}, {&(0x7f0000000280)="738974", 0x3}, {&(0x7f0000000540)="a305d2fac00b8ecbe83a10faa57e333026228308cbbb02ac5a93c7943bf46651e936f19344dd0a6c89277ce1ef59fc32de944e4ccfdb200da85ce7be9d2bad71d5fb6d02bc5a04f7d865cb5b322312102004d98f146eb4d40055345ea88809664c6287", 0x63}], 0x7, 0x1) read(r1, &(0x7f00000002c0)=""/246, 0xf6) 03:39:57 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$getown(r0, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='cmdline\x00') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x797fffffffffff) read(r3, &(0x7f00000002c0)=""/246, 0xf6) 03:39:57 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000340), 0x797fffffffffff) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x101000, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xfffffffffffffeab) syz_open_procfs(r3, &(0x7f0000000100)='net/fib_triestat\x00') read(r1, &(0x7f00000001c0)=""/246, 0xf6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x48000, 0x0) 03:39:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000280)={0x20, 0x0, 0x5, {0x0, 0x7}}, 0x20) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) epoll_wait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x5, 0x9) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x1200}}]}}) 03:39:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001540)="0a5cc80700315f85714070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000001c0), &(0x7f0000000100)='\x00', 0x1, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x380c0000) clone(0x0, &(0x7f0000000200), &(0x7f0000000180), &(0x7f0000000280), &(0x7f00000002c0)) keyctl$get_security(0xb, r1, &(0x7f0000000200)=""/84, 0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1da83f81da7444d3be3df0e033a197fa3618a8b36241a918e42b31e5dd4192391755703de720192e5f16bbdbce62b44d87dad7597cc0b6cf21154d6be567e33428dfff2b2edec5a41bef00932c71c5e411d9df4b115b7b66cd6a4a186ea6073a24342919480e1d036c3f383235da288e21417310cdc7b07377aca3184a22c766a904", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r1, 0x4, 0x7, r3) 03:39:57 executing program 3: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x8de3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) time(&(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@dev, @in6=@loopback}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) sendfile(r2, r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x79800000000003) read(r2, &(0x7f00000002c0)=""/246, 0x3f9) ioctl$VT_RELDISP(r1, 0x5605) 03:39:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:58 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="00000e016d62075f819b60a4e3eabe29fc5f714e3031a4aca928f8c7ba7f13da6ff3505068d842769e55e48502ecc8e16145b08c3af0a9e18039bd77d8f063b79b518814c39e176a2978f83d2fc4a5485c6083a83ad589150e7dffb98cb6d752c6b3c1686824806869b674f975bc5cce39698115980f286dcc957a1f178ae6c9c06e51000000000000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x797fffffffffff) syncfs(r0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/246, 0xf6) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000002c0)=""/177) 03:39:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ustat(0x7, &(0x7f0000000140)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/126) 03:39:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:58 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:58 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002880)=[0xee00, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:58 executing program 3: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/ip6_tables_targets\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) read(r2, &(0x7f00000001c0)=""/246, 0xf6) 03:39:58 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='.\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x10000, &(0x7f0000000840)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x3ffe}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x7ff}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}]}}) 03:39:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) sendfile(r0, r0, &(0x7f0000000000)=0x22, 0x3) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) setreuid(r2, r3) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:39:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) fstat(r0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) r2 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='*\x00', 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000180)=""/21, 0x15) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f00000002c0), 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) [ 811.700924] selinux_nlmsg_perm: 4 callbacks suppressed [ 811.700932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2526 comm=syz-executor0 03:39:58 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 811.750580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2541 comm=syz-executor4 [ 811.784674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2547 comm=syz-executor1 03:39:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:39:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) read$FUSE(r1, &(0x7f0000001000), 0x1000) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x406002, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/4096) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/33, &(0x7f0000000180)=0x21) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) r2 = dup(r1) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4000002004e20, @multicast2}}) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000100)=""/70) 03:39:59 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x20000, 0x0) sendmsg$unix(r1, &(0x7f0000001540)={&(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="a4b0d2b05a3f9e8110a6f52294d7a639a0d762a55b0c9a1e65f806a8276956b2aab3d89fa3325de9f25f950e8b3872127cc28f364a3a7b47ca2278d72618cc263df9ad7854d7aa0acc183e578f97450739196cb6909af1bdb77c3fd8504b99d3f1d7900c4ec8e803cc28d7a2413f8e4eb31afeb8afe58397b90e66ad821ed61eb3a8d81c389cad1bbf7abf7fb4bf0544364c36d1a71d", 0x96}, {&(0x7f0000000140)="dc25f90a9c55036fb2e68c6def7c64ed09df96dec2abc4ca33100dc7147ce77772f746ff90be67e083c1a378ac7bd8a15a15d71037399408b4b51eed9e062164effdf1b6f7ce10a33e4bb29a33300b04aff4a48f858c2f24f06cb62fb85f5e6b8d74f0056efe3290f666cee096fa36", 0x6f}, {&(0x7f0000000540)="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", 0x1000}], 0x3, &(0x7f00000004c0)=[@rights={0x18, 0x1, 0x1, [r0, r2]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x40, 0x4c0c4}, 0x11) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:39:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',(']) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e23, @multicast1}}) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:39:59 executing program 6: gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect(r1, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21}, 0x3, 0x3, 0x2, 0x3}}, 0x80) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303076a4303030303030303030303034303030302c757365725f69643d4e343088e4501e044b6749f65c794c7ce59047fbeac6bf9e37ebc92783dd69fb982a66c588af610bd00dc0ed167cd70f0b3b58471886393aa4ac0da811fc2a0409", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) getpeername(r1, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x80) fgetxattr(r2, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000001540)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x1) recvfrom$unix(r2, &(0x7f0000000540)=""/4096, 0x1000, 0x2021, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 03:39:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x1b, 0x1000, 0x2, 0x9, 0x3, 0x7fff, 0x9}}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0001"]) 03:39:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:59 executing program 3: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/rt6_stats\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @broadcast, r3}, 0xc) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000000c0)) read(r2, &(0x7f00000001c0)=""/246, 0xf6) fcntl$setlease(r2, 0x400, 0x3) [ 812.555853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2592 comm=syz-executor0 03:39:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:59 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='cmdline\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x100, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) [ 812.602532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2602 comm=syz-executor1 [ 812.625716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2604 comm=syz-executor4 03:39:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:39:59 executing program 6: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x140, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="236772ff030000cb00e3", @ANYRESDEC=r2, @ANYBLOB=',\x00']) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e21, @rand_addr=0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:39:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:39:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000480)=""/242, 0xf2}], 0x5, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000580)=0x0) r2 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x101000) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0xffffffffffffffff, 0x4, 0xffffffffffff884e, 0x8, 0x0, 0x4, 0x20400, 0x4, 0x2, 0x6, 0xf, 0x0, 0x4, 0x728d, 0x4, 0x7f, 0x7f, 0x0, 0x374bfe96, 0x40, 0x3, 0xd0, 0x2, 0x280a, 0x3, 0xfffffffffffffe00, 0x0, 0x7584, 0x1f, 0x80, 0x9, 0x1, 0x1, 0x80000001, 0x81, 0x20a, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000340), 0x1}, 0x2, 0x1ff, 0xfffffffffffffffa, 0x5, 0x80000000, 0xffffffffffffffff, 0x2}, r1, 0xc, r2, 0xa) 03:39:59 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:39:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r2) 03:39:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:00 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:00 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff}) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x24) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x1000, &(0x7f0000000180)={'trans=unix,'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) socket$l2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x797fffffffffff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) 03:40:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:00 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootJode=00000000000000000040000,user_id}', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x48440, 0x0) socketpair(0x11, 0x80000, 0x8000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r2, &(0x7f0000000080)='./file0/file0\x00', 0x8c) 03:40:00 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x797fffffffffff) signalfd(r0, &(0x7f0000000000)={0x6}, 0x8) read(r0, &(0x7f00000001c0)=""/246, 0xf6) lseek(r0, 0x0, 0x1) 03:40:00 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200, 0x0) [ 813.442480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2659 comm=syz-executor0 03:40:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) [ 813.481838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2667 comm=syz-executor1 [ 813.499525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2671 comm=syz-executor4 03:40:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x81, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:00 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="e208"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read(r1, &(0x7f00000006c0)=""/246, 0x2be) 03:40:00 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:00 executing program 5: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB="341f2bea8ed59897a833dbf62048590cae8813a78c60041d47995c160e027364330645a2d1377be0255d41718abc450dd103f99e6753081bf904bf00000000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:00 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:00 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:00 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x7, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000080)={0x38e7, 0x3f, 0x49, 0x5, 0x6, 0x4, 0xf8}) 03:40:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) sendfile(r1, r1, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000340)=""/246, 0x22dfe13c532d6419) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x80000000, 0x6}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={{0x0, 0x7530}, {r2, r3/1000+30000}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x73a}) 03:40:00 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:00 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x10000, 0x0) write$P9_RWALK(r0, &(0x7f0000000380)={0x8b, 0x6f, 0x2, {0xa, [{0x4, 0x2, 0x8}, {0x8, 0x3, 0x1}, {0x0, 0x2, 0x5}, {0x18, 0x2}, {0x0, 0x4, 0x4}, {0x3, 0x4, 0x2}, {0x20, 0x1, 0x6}, {0x1d, 0x3, 0x5}, {0xee, 0x0, 0x3}, {0x2, 0x4, 0x5}]}}, 0x8b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x24) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x3e, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x0, 'lblc\x00', 0x22, 0x1, 0x16}, {@broadcast, 0x4e24, 0x10004, 0x6, 0x100, 0x8}}, 0x44) write(r2, &(0x7f0000000140)="7339ba37", 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x3, 'yam0\x00', 0x3}, 0x18) ftruncate(r1, 0x4a0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc4347d9df2574414d4dcbb7dff15c0a1c48e96c80217367b37bff5854ab9e07ef05cab429a435a4470ef80352372d4288a61c5c79301d83736df3d106910780358f43516697898bef1bd27dd6ca2d4e7ee354e12acb0385b648d4843ffe0827727a3d64e5ecf3df11ce96fdd7baa9a5935444c468140ab919422b94b5f6017a78d181c28ea717be1aa803ec0e180bd1de90eb89cff81122501ff925d4373937b56c6cc02b94319fbfd0196f8d9e2845583890f378d26aa6301a4762c29807dae773efca9dca42d348d186a75a45a5bafa8cfe346885d854b1941e9"]) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000240)) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) 03:40:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x8000) read(r0, &(0x7f00000001c0)=""/246, 0xffffffffffffff14) fcntl$setsig(r0, 0xa, 0x3c) 03:40:00 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64650100000030303030303030303030303030303034303030302c757365725f69643d93d110c5dfde75a80c94bbf8c7018c8c6251866c3df12f73fcd21b79f0eaea733dfde66644b39eba44de8b3473db1a5a75309813dc2331704ab0474b6328555bf7", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 814.359829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2733 comm=syz-executor4 03:40:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7, 0x4}) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000003c0)=""/246, 0xf6) 03:40:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x9c90, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:01 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:01 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) read(r1, &(0x7f00000001c0)=""/246, 0xf6) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) 03:40:02 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x90, r2, 0x401, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe2c4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 03:40:02 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:02 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x240000, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 03:40:02 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0x203) 03:40:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:02 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xfffffd91) 03:40:02 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/sequencer\x00', 0x800, 0x0) getpeername$inet(r1, &(0x7f0000003200)={0x2, 0x0, @broadcast}, &(0x7f0000003240)=0x10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="6d643dc9bc286c6f3d55ccf757af050aa3101129280d7d8683b0b0096d7d3e4afbe341715e5d32f5e0b1244a71420db65ef18372d66e90dd7b025f505c3014e21c6c85b678b6f4a42beee6c059ff129bf45594dc33b88aa28d94d8dc1cf99fe6ca4cc953d68740d926d59d75c794d6014304c864c9aefa", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d6aae407f6129ab41c6ca872a5b1f25fb2122f260a6616f633fe6f165911a458e8b61e1ec1060001eb122680b3f5982a2bf8e92a9d8050e0338dff15571e542b54d9e", @ANYRESDEC=r2, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000001ec0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001e00)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/243, 0xf3}], 0x5, &(0x7f0000001640)=""/150, 0x96}, 0x2}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000001780)=""/73, 0x49}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000001800)=""/41, 0x29}, {&(0x7f0000001840)=""/19, 0x13}, {&(0x7f0000001880)=""/231, 0xe7}, {&(0x7f0000001980)=""/64, 0x40}], 0x7, &(0x7f0000001a40)=""/165, 0xa5, 0x62}, 0x8}, {{&(0x7f0000001b00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/210, 0xd2}, {&(0x7f0000001c80)=""/3, 0x3}], 0x2, &(0x7f0000001d00)=""/205, 0xcd, 0x2}, 0x73}], 0x3, 0x2002, &(0x7f0000001f00)={r4, r5+30000000}) utime(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0x3, 0x9}) 03:40:02 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = gettid() write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x2, {{0x0, 0x40, 0x3, r1}}}, 0x28) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:02 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/user\x00', 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) sendfile(r1, r1, &(0x7f0000000000), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:02 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:02 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x81c0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75701d02643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fallocate(r0, 0x1, 0x4, 0x7546d432) 03:40:03 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:03 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:03 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:03 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) read(r0, &(0x7f00000001c0)=""/246, 0xf6) 03:40:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/checkreqprot\x00', 0x1d3002, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000002c0)=0x908, 0x4) open(&(0x7f00000001c0)='./file0\x00', 0x101142, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d5dbabf7ce984bad2901103c772edce30616dd46e251395f3dc804b0a2eada67dff373219eb53", @ANYRESHEX=r3, @ANYBLOB=',access=c#ient,\x00']) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') clock_getres(0x5, &(0x7f00000005c0)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e20, 0xfffffffffffffffa, @empty, 0x7}, {0xa, 0x4e23, 0x963, @dev={0xfe, 0x80, [], 0x20}, 0x100000000}, 0x8, [0x4, 0xbae, 0x1e, 0x9, 0x6, 0x1, 0xa08, 0x3]}, 0x5c) syz_mount_image$btrfs(&(0x7f0000000340)='btrfs\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x2, &(0x7f0000000500)=[{&(0x7f00000003c0)="b21c2da9b059449192a571e6a9a7ee6ced8dca9ae06b06310b363b5700a93aae7b1b4f052a0e02bd791a5d59", 0x2c}, {&(0x7f0000000480)="680c710bfb48ee91779150bf82eb86fe998dd2b1446c251858e35fb444eb9ae82e03a2d306e9f0281d779d4e417c14182b48fa23159909e7cc4c20f27300f5124ab486feffb307c2b0ef722b124e25481514ddb99d85006a0f22783bd007ad3dcfa65333c6d97c52e96541", 0x6b, 0xb8}], 0x1000, &(0x7f0000000540)={[{@skip_balance='skip_balance'}, {@nobarrier='nobarrier'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@skip_balance='skip_balance'}, {@noinode_cache='noinode_cache'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:03 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:03 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:03 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) setrlimit(0xfffffffffffffffb, &(0x7f00000002c0)={0x80007, 0x3fe}) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x8, 0x2, 0x5}}, 0x14) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'ifb0\x00', 0x1}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000140)) [ 816.704695] 9pnet: Insufficient options for proto=fd 03:40:03 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:03 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80180, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfffffffffffffffd, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}}) 03:40:03 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000001c0)=""/246, 0xf6) [ 816.776116] selinux_nlmsg_perm: 5 callbacks suppressed [ 816.782374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2870 comm=syz-executor4 03:40:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400000000000000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x22b4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:03 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) [ 816.794425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2878 comm=syz-executor0 03:40:03 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) read(r0, &(0x7f00000001c0)=""/246, 0xf6) [ 816.797453] 9pnet: Insufficient options for proto=fd [ 816.823606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2882 comm=syz-executor1 03:40:04 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:04 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x200, 0x0) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f00000003c0), &(0x7f0000000480)=0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='?\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080425bd7000fcdbdf2504000000400001000800050001000000080008000000001008000600776c6300080009003d00000008000800090000000c00070001000000080000000800020000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$netlink(r3, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) 03:40:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:04 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0xfffffffffffffff5, 0x4, {0x3, 0x1, 0x6af, 0x100000000, 0x9, 0x8, {0x3, 0xf211, 0x1, 0x4b, 0x8, 0x0, 0x4cb, 0x1, 0xfff, 0x8400000000000000, 0x3ff, r1, r2, 0x4, 0x8001}}}, 0x90) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:04 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:04 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:04 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:04 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:04 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create(0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$describe(0x6, r2, &(0x7f0000000640)=""/237, 0xed) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000010000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="ffff"]) request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='fd', r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 817.683361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2952 comm=syz-executor0 03:40:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0xab1e8d47b79de46f, 0x7ffe, 0x2}, 0x6, 0x8}) sendfile(r1, r1, &(0x7f0000000040)=0x1, 0x797fffffffffff) r2 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@generic={0x2, 0x8, 0x8000}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={@remote, 0x13, r3}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x6, 0xfffffffffffff001}) 03:40:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) [ 817.721370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2962 comm=syz-executor1 03:40:04 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x60840) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x401) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='cmdline\x00') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x797fffffffffff) read(r3, &(0x7f00000001c0)=""/246, 0xf6) [ 817.725858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=2963 comm=syz-executor4 03:40:05 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:05 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0xc727, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="3a50db709a8e4e197adf4116a6f56e9321dcd8c975be56e1d2aa1fba2eedd3be063f3a6f283b27b123a1ed7159e28414d311f4f407f63c9adae8fa11b4be63dc796931785aa0c1cd57a00dd058a8ce55217fc3a31fd5c62e6bce63c9fc1bf02780dc332c19c1fa034ef78bcefca81a6686644e573e162a33481278d7dba4d91dcb7ecf401fb63f257ef9198196c9bfa845cc3f3f7b326ed2b8e044323e4de4", 0x9f, 0x5ac}, {&(0x7f0000000780)="04eb62d03c185c413c66ff4385db02413437970bf1dfeb9ab9f6c40177e1fd743053e86af8a14b651e052501895510814dd78c0edd1a311289a6391382d859177fc87b847ae6b3888adbac16de32840e5922a54b3aabefdc584851df0d4b0ca5742a6d0bc27406fb01a8254996ae2342f5fa2b4c44539beb93580ef2b4c92b9dcc02c12569e6cd3b67980dc9b1c325c34ff2f9fa36e004a3fa3366dd8b6277c033", 0xa1}, {&(0x7f0000000180)="b7dd56164a089e5732ad3ed80f6a45814b41c1a6f8750713ac702c721be0d8ffe2bf56480d596fd254ebc15a09faa861e955c4d034aa0db2fc3d2d141a0d0e6ce80bb146cb9106633845e2633486520ad364b7dfdeca529d93fbd26144d45fa2b334cc54e2f32062ff544e5b9f82952db5944b", 0x73, 0x8000}, {&(0x7f0000000340)="8b3d4b81d8b8268ef061e9b9004249c74fc9fb9c43449d74902f52e470a384", 0x1f, 0x5}], 0x40000, &(0x7f00000005c0)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c7233b12fee486868a3db92355e6f6f746d6f64653d30303000003030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0xa2200) getpeername$inet6(r1, &(0x7f0000000680)={0xa, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x1c) 03:40:05 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdirat(r2, &(0x7f0000000500)='./file0/file0\x00', 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x248040, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000140)={0xbd86, 0x401, 0x4, {r4, r5+30000000}, 0x0, 0xa05}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) 03:40:05 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000001c0)=""/246, 0xf6) 03:40:05 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:05 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {0xffffffffffffffff, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xffffffffffffffff, "1bb7670182978f0300000000000004bf764095d43a5094f4b23c1c29b51dda91d91e08a14591eacd580082f27dabdcdbeae7f5d8e8f9706468579ae10010a75b00000500"}, 0xd8) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf458, 0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000006c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000700)={@remote}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in=@dev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0x1a1e02898d991b07) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@remote, @in=@dev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000a00), &(0x7f0000000a40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) recvmsg(r1, &(0x7f00000010c0)={&(0x7f0000000c80)=@ll, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d40)=""/205, 0xcd}, {&(0x7f0000000e40)=""/242, 0xf2}, {&(0x7f0000000f40)=""/245, 0xf5}], 0x10000000000001db, &(0x7f0000001080)=""/11, 0xb}, 0x10000) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000400)) r6 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0), &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973", 0x70, 0xfffffffffffffffd) keyctl$invalidate(0x15, r6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x4) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000001100)=""/97) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r8, r7, &(0x7f0000000040), 0x797fffffffffff) 03:40:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:05 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) select(0x40, &(0x7f0000000040)={0xffffffff, 0x2, 0x7, 0x7ff, 0x1, 0x4, 0x8, 0xee2c}, &(0x7f0000000080)={0x9, 0xa53, 0x7f, 0x400, 0xa8ca, 0x6718, 0x81, 0xa8a}, &(0x7f00000000c0)={0x3bb, 0x1f, 0x2, 0x5, 0xc51def4, 0x7ff, 0x3, 0xfffffffffffffbff}, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:05 executing program 5: setrlimit(0x7, &(0x7f0000000080)={0x20}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 818.635703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3030 comm=syz-executor4 03:40:05 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x298600, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @mcast2, 0x3}, {0xa, 0x4e22, 0x8, @loopback, 0x9}, 0x0, [0x3, 0x26f0, 0x1d0a, 0x1000, 0x9, 0x100, 0x7, 0x92]}, 0x5c) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="660100", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:05 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x505000, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 818.639309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3029 comm=syz-executor0 [ 818.660780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3034 comm=syz-executor1 03:40:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:06 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f758676f1705f69643d", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:06 executing program 5: r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x10000, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000340)='./file0\x00', 0xc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000400)='ns/pid_for_children\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',grid=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030b03030382c6d61785f726561643d30783030303030303030b0303030303030352c00"]) 03:40:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:06 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc8070031") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) [ 819.535754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3096 comm=syz-executor4 03:40:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:40:06 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) fstatfs(r0, &(0x7f0000000040)=""/118) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d1c6bcd5b5d9cac0043a2b3fddc4d3689f5469b508fc44ca182fb60b2da5d7f29c673dc4a4e3762c16d4f7c3ed73dd9853d1873320df41658b443b7384737c56f35937ac3d7ebc2152a218b61427c61c77bbf7f1079f25d7a0ae0a51de", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dd6164251d69464d420b392be58473c204d05745f4c79d7d0ecdaf95110e6566252b8ef86211366d10f1bfaaeab12a45e57176c58a89814f2c113559e2a525b0571103a997530346f4329b1c178ffba3911551ea325036328ec44f36520f9e1fca3b7bda6d9317fcdd984c56b7cdcae655907a82b2bcdf0dbfa4b2b635ea3d278d8a72cad767c6b6a275662d00eded1ee6348ad0c2b974d1eaa4048617f7b224ec8f40e50eda3dbf413ebe888b7e97fe34404cddfb7443619041a42", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc8070031") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:06 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) 03:40:06 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r0, r1/1000+10000}}) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x1, @local}, 0x4, {0x2, 0x4e22, @rand_addr=0x8}, 'veth0_to_bond\x00'}) 03:40:06 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc8070031") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:06 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='cmdline\x00') ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xa2e) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/user\x00', 0x2, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000440)=""/165, &(0x7f0000000300)=0xa5) fsetxattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='trusted.cmdline\t'], &(0x7f0000000180)='/selinux/user\x00', 0xe, 0x2) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) sendfile(r1, r2, &(0x7f0000000080), 0xff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000002c0)=r1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000380)={0x4, 0xffff, 0x200, 'queue0\x00', 0x7}) 03:40:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:06 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x1, 0x1, 0x7, 0x3f, 0x3ff, 0x3, 0x3}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:06 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="64bd", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) 03:40:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x20, 0x6}) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 03:40:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:06 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:06 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x1, 0x2) accept(r2, &(0x7f0000000340)=@in={0x2, 0x0, @remote}, &(0x7f0000000180)=0x80) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmoWe=00000000000000000040 00,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xc200, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x40) mkdirat(r3, &(0x7f0000000500)='./file0/file0\x00', 0x0) lremovexattr(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') 03:40:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) 03:40:07 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0x4) write$FUSE_DIRENT(r0, &(0x7f0000000240)={0xb0, 0x0, 0x8, [{0x3, 0x73eaa175, 0x2, 0x3, ')/'}, {0x1, 0x1, 0x8, 0x4, 'group_id'}, {0x6, 0x8, 0x2, 0x7, 'fd'}, {0x2, 0x1, 0x5, 0xe1e, 'fuse\x00'}, {0x5, 0x40, 0x7, 0x6, 'vmnet1)'}]}, 0xb0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80800) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="174c024d1c99477cca04764d0daa557dc15f167b6025629f97cf389c8ea940f0bb7f5eff53b2fae50d0b9fb25fd1a5cb5691ab2cc2cc0f9808a2e0c7a8dd23390b540773c1aa4952676e61f6c782cf1328bfefaa0d1dfcc66e3e0ab71884d36eaf7d24ef24b70bdbae1a6ee13382c4b8a12582aa5db24eb41f189997ed7bce2b102cb01bafd3a4c2125c449b8483089a500bc57b5fbf912f6b0c5fe8d7a3e20c57720e19fff9f2c3887bd0c69e1ef9264dbed265be8db2002dd3bcb0cd8eab3f235ea9671e745e30573b0d70835815c08d56a18032d25372c3f00e98fb2f8002185f89f69598714e3066", 0xea}, {&(0x7f0000000580)="01c8037714d69cf0ac94811d75842fce65ca3f3f48bed3ff6b38e7a506d596bddd819a30c24233aada00d08745a47461335fe77f1d2db2ea363878155a7325e0c8e1d19aef6f10df08b51196436dd026d5f0399e39f97fcfddb9ac2cf04f3fdc7bc2bfc52ea574638d295a40ba4993019afe789d2340e8cf2a488045ad01f94f402961887b103dda18a880411abdc60abaaaf662436be7fa6b9a1b6e00b90be36f6f022c0ab198224575fec7a1306aa0dca74adfd1fad799b0d665d39ddfe04547b5230d4bd6f44221d9e54599eded1a4344b299d23bc97e6464", 0xda}], 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) socket$inet(0x2, 0x800, 0x7) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:07 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0x4000000000000) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:07 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:07 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000001c0)=[0xee01]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xc03f}}, {@default_permissions='default_permissions'}]}}) 03:40:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f857140") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:07 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',root-ode=00000000000N00000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) accept$unix(r3, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) dup3(r0, r0, 0x80000) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x400000, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x10000, 0x400000000000104) getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={@loopback, @empty, @empty, 0xffffffff, 0x8, 0x2, 0x500, 0x6a8, 0x40000000, r5}) accept$packet(r3, &(0x7f0000006d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006d80)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000006dc0)={{{@in6, @in=@loopback, 0x4e23, 0x3, 0x4e20, 0x7fffffff, 0xa, 0xa0, 0xa0, 0x2c, r6, r1}, {0x9, 0xbbb, 0x9, 0x5, 0x6, 0x100000000, 0x3f, 0x40}, {0x2, 0x81, 0x4, 0x6}, 0x7, 0x6e6bb3, 0x2, 0x1, 0x3, 0x8db18a502651133d}, {{@in=@multicast1, 0x4d4, 0xff}, 0x0, @in6=@ipv4={[], [], @remote}, 0x3502, 0x3, 0x3, 0x1ff, 0xe130, 0xffff, 0x10001}}, 0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='fuse\x00', 0x800030, &(0x7f0000000680)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff7}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8000}}]}}) mkdirat(r4, &(0x7f0000000500)='./file0\x00', 0x1f) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000140)) 03:40:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:07 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:07 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, &(0x7f0000000140)=0x10) mount$fuse(0x0, &(0x7f0000000340)='./file2\x00', &(0x7f00000002c0)='fuse\x00', 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040043,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB='\x00\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) unlinkat(r4, &(0x7f0000000080)='./file1\x00', 0x200) 03:40:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f857140") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000002c0)=""/246, 0x27) fcntl$setpipe(r0, 0x407, 0x7fff) 03:40:07 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000d6", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x4000, 0x0) r3 = dup3(r0, r2, 0x80000) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/45, 0x2d) 03:40:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f857140") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) prctl$intptr(0xe, 0x9) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:07 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='r\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:08 executing program 3: socketpair(0xa, 0x807, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x797fffffffffff) fadvise64(r2, 0x0, 0x9, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0xd22, 0x7fff, 0x4, 0x3, 0x7, 0x16823ae3, 0x24, 0x38, 0x1db, 0x78, 0x7ff, 0x20, 0x2, 0x3, 0x8, 0x16f}, [{0x60000002, 0x89, 0x7fff, 0x8, 0x0, 0x9, 0x8, 0x7fe7}], "b3", [[], [], []]}, 0x359) read(r3, &(0x7f00000001c0)=""/246, 0xf6) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) getpid() getpriority(0x0, r4) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000000)) 03:40:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:08 executing program 6: modify_ldt$write2(0x11, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x4000, 0x20, 0x3, 0x0, 0x6, 0x81, 0x0, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:08 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) r6 = getgid() fstat(0xffffffffffffff9c, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000b40)=[0xee01, 0xee01]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000c80)=0xe8) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000d80)={0x3c8, 0x0, 0x6, [{{0x6, 0x2, 0x401, 0x1, 0x6, 0x0, {0x3, 0x168, 0x10001, 0x186, 0x100000000, 0xaf1e, 0xd6da, 0x7, 0x3f, 0x5, 0x7fffffff, r1, r2, 0xe1, 0x69c}}, {0x4, 0x80000000, 0x0, 0x9}}, {{0x4, 0x2, 0x5, 0x0, 0x953, 0x9, {0x2, 0x100, 0x1, 0x8000, 0x800, 0x3a, 0x81, 0x9, 0x5, 0x9, 0x3, r3, r4, 0x200, 0x8000}}, {0x1, 0x2, 0xf, 0xfffffffffffffff8, 'wlan1!mime_type'}}, {{0x1, 0x0, 0x3, 0x6, 0xffff, 0x1, {0x3, 0x7ff, 0xa, 0x8000, 0x3, 0x1, 0x7, 0x10000, 0xd375, 0x9, 0x4, r5, r6, 0x9, 0xfffffffffffffff7}}, {0x5, 0x101, 0x8, 0xbe4, 'rootmode'}}, {{0x0, 0x1, 0x7, 0x80, 0x6, 0x8, {0x1, 0x8, 0x1, 0x100000001, 0x5, 0x5, 0x320, 0xeb8, 0x1, 0x200, 0x1, r7, r8, 0x6, 0x9}}, {0x3, 0x4, 0x0, 0xffffffffffffff80}}, {{0x0, 0x1, 0x3, 0xfc09, 0xf0a9, 0x2, {0x1, 0x4690, 0x5, 0x6, 0x6, 0x6, 0x4f543b63, 0x6, 0x9, 0xe89a, 0xffffffffffffffff, r9, r10, 0x4, 0x9}}, {0x6, 0x120000000000000, 0x8, 0x6, 'group_id'}}, {{0x4, 0x3, 0xfffffffffffffbff, 0x8, 0x2, 0x20, {0x5, 0x7, 0x9, 0x1, 0xfffffffffffffff7, 0x10001, 0x4, 0xa6, 0x5, 0xffff, 0x5, r11, r12, 0xffff, 0x2}}, {0x1, 0x8001, 0x2, 0x80000000, 'fd'}}]}, 0x3c8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x200, 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clock_gettime(0x2, &(0x7f0000000040)) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x7, &(0x7f00000001c0)=[0x0, 0xee00, 0xee01, 0xee00, 0x0, 0x0, 0x0]) openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x80000, 0x0) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) accept(r16, 0x0, &(0x7f0000000380)=0xffffffffffffff43) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x30081, &(0x7f0000000240)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {'group_id', 0x3d, r15}, 0x2c, {[{@allow_other='allow_other'}]}}) 03:40:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:08 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:08 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:08 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x80082, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 03:40:08 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB="66643d0a41a5afc79044e5df57f68eb48e74f5c9099a4033b9ee72804cd34160b61fe36ba1704b8662dae315fa1991d80bc889d339f1145b6a8fbe5361bc11987da411a3956dfe630bbe2b3135d006aa83cb6e4d883387d9ffee09f6ee9400f6c11371171c79a487c7cab5c9660ce68b213ad483424d695827832cb9baee8337cdda65ac288cc3a613f4f6eb9965033d582d44fd78793f6939ac73b90df3b1faba72f05ee2e826ff8f7e26db5de487a0851db42586f97a466a", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303034f1a8a63030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000680)=""/4096) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x4, 0x7ff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 03:40:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f00000002c0)={0x7, 0x100000001, 0x2, 0xb5, 0x7, [{0x7, 0x3, 0x5, 0x0, 0x0, 0x208d}, {0x200, 0x5, 0xe5, 0x0, 0x0, 0x1100}, {0x23e, 0x3ff, 0x7f, 0x0, 0x0, 0x284}, {0xfffffffeffffffff, 0x2, 0x7, 0x0, 0x0, 0x801}, {0x7ff, 0x6, 0x10, 0x0, 0x0, 0x566ce3165785ab3c}, {0x100, 0x194d, 0x9}, {0x401, 0x80, 0x4, 0x0, 0x0, 0x80}]}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x79800000000003) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:08 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x48300, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40) r2 = geteuid() r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x80000, 0x0) fstat(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x40014, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r2, @ANYBLOB="71a8c6cc361f0006e1d0", @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000006,max_read=0x0000000000000009,max_read=0x0000000000000003,blksize=0x0000000000001a00,allow_other,blksize=0x0000000000000200,allow_other,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:08 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = memfd_create(&(0x7f0000000040)='group_id', 0x1) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) 03:40:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x41) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) [ 822.104651] selinux_nlmsg_perm: 8 callbacks suppressed [ 822.104660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3316 comm=syz-executor0 03:40:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) socket$nl_generic(0x10, 0x3, 0x10) [ 822.123612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3321 comm=syz-executor4 [ 822.125598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3322 comm=syz-executor1 03:40:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:09 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c65726f0d7f75705f69643d", @ANYRESDEC=r1, @ANYBLOB=',\x00']) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000080)={0x100, 0x3, {0xffffffffffffffff, 0x2, 0x4, 0x2, 0x6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x20080, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0xa6, 0x29, 0x1, {0x3, [{{0x40, 0x2, 0x1}, 0x1f0efc51, 0x80, 0x7, './file0'}, {{0x3, 0x4, 0x3}, 0x80000001, 0x400, 0x7, './file0'}, {{0x40, 0x1, 0x8}, 0x3, 0x5c3c1e4f, 0x7, './file0'}, {{0x6, 0x3, 0x5}, 0xf8, 0x1, 0x7, './file0'}, {{0x2, 0x4, 0x2}, 0x1, 0x3fc0, 0x7, './file0'}]}}, 0xa6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:09 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dbffe46b8679a73ffcbfdf4619e9f2cb10a77ad8d1bff0d87c6266139c69fb50626db9f2e4d81d795f405", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:09 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}]}}) 03:40:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:09 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030050030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0xf, 0x1b, 0xd, 0x5, 0x1, 0x0, 0x5, 0x109, 0x1}}) 03:40:09 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x40) 03:40:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) 03:40:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) [ 822.958332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3390 comm=syz-executor1 03:40:09 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x1, 0x40) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) socketpair(0x5, 0x4, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2000, 0x0) fanotify_mark(r3, 0x4, 0x40000001, r4, &(0x7f00000000c0)='./file0/file0\x00') ustat(0x8b, &(0x7f0000000140)) [ 822.967964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3392 comm=syz-executor0 [ 822.986132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3395 comm=syz-executor4 03:40:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) 03:40:10 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:10 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) lremovexattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='system.sockprotoname\x00') mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x20000, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d60362de99cbc2068e7256f9209269d604d059c118bafb0f95f59000000000000000000", @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="045611a6fd536143579550f0e9b7d15263d664b327e66395682c5cfcf9b375438dbae3aecb990e0a7a085ea5544ab7b1380db75ae3e0db930c7ece"], @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYBLOB="fe8620fb24e5e31cc11fe2ba8120a1eeee51c6d29c01fd9f1d6caedf81c73219d1da431200164c69ef3869e6e2022b54d94209e2c6d93e23747f8c5a1ddd132938b6f4a50d19ebe5ca24358b08a518ccaaf402e6ac8e7af2053619174ae433450d54a3dc5af7fc3a878b02e3bfba2ad39b91921b5de255766063335ce61108f80c64f68e9102148bcb19eaa5d31230a77915b9a07532edbadc805b6aaa69981611ac3fa06708ef72375a536551b428747392b8fbd797a3783b3347fa067e79cc", @ANYPTR64], @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR64, @ANYRES64]]]) 03:40:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) write$selinux_access(r0, &(0x7f0000000100)={'system_u:object_r:faillog_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x6}, 0x4b) 03:40:10 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0) fchmodat(r0, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="e56400c35a8ab9178f1a1fdb9e2917e93de83cfb6c040d0d49b26e921c36ff48948e3d30a372431449b5c575cf89c6cec40a4a4aedbb59784204b064e2feaf4d4f34338e9532d5dcbe01a74d8640cb5cc1eeb8ee4370d338e0e9d5d8b685366d32bee8d82cbdecf122dd6e2e064d617af946793856bf07d6fba774f0a8fc0a604680576510549536e08e2a811e429f9ad427677ceb93e9f69d9ff8acefb00dc2aa9b259c680d71d5de63b1861e2de4403f9ee15c16cc9e56ed2b06b13620fb60b326a2dca34380856697e707515cb85a1212921df0e15968ba1a427f48559b03d4fac4ebbb70c9b40397", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000>00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) 03:40:10 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:10 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:10 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='\b\x00']) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x100000001) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:10 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2002, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x67) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 03:40:10 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = getegid() lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) getgid() getpgid(r3) 03:40:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000002c0)={{0xbf, 0x8}, 'port1\x00', 0x2, 0x1, 0x5, 0x7fff, 0x7fffffff, 0x1, 0x5, 0x0, 0x2, 0xd51}) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, 0x5}, 0x10) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4, 0x7, 0x7}}, 0x30) [ 823.833587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3468 comm=syz-executor0 [ 823.850628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3469 comm=syz-executor1 [ 823.852009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3467 comm=syz-executor4 03:40:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:11 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x0, 0x4, 0x6}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x45f37677ca6ad62b, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$RTC_AIE_OFF(r1, 0x7002) 03:40:11 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read'}}]}}) 03:40:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x3f, 0x1, 0x4}, 0x10) 03:40:11 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:11 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) eventfd(0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x7f, 0xaa5, 0x2a1, 0x800, 0x0, 0x5, 0x2040, 0x8, 0x3, 0x0, 0xffffffff7fffffff, 0x3, 0x100, 0x7, 0x66, 0x5d, 0x4, 0x7, 0x3, 0x5, 0x0, 0x1, 0x10001, 0x6, 0x1, 0xb9a6, 0x1a5, 0xc26, 0x1f, 0x200, 0x9, 0x0, 0x3, 0x3, 0x101, 0x6, 0x0, 0x4, 0x7, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002, 0x8001, 0xfffffffffffffff9, 0x7, 0x4, 0x1, 0x1}, r1, 0x3, 0xffffffffffffffff, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x301000, 0x104) 03:40:11 executing program 3: rt_sigreturn() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000004c0)=""/246, 0xfffffffffffffebd) 03:40:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read'}}]}}) 03:40:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000002c0)=""/246, 0xf6) 03:40:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read'}}]}}) [ 824.670194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3522 comm=syz-executor1 03:40:11 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x201, 0x0) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000140)='fd', &(0x7f0000000180)='/dev/fuse\x00', &(0x7f00000002c0)='rootmode'], &(0x7f0000000540)=[&(0x7f0000000380)='group_id', &(0x7f00000003c0)='\x00', &(0x7f0000000480)='rootmode', &(0x7f00000004c0)='group_id'], 0x100) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) getpgid(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 03:40:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 03:40:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:12 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x797fffffffffff) memfd_create(&(0x7f0000000000)='/selinux/user\x00', 0x3) read(r0, &(0x7f00000001c0)=""/246, 0xf6) 03:40:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 03:40:12 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='$group_id=', @ANYRESDEC=r1, @ANYBLOB="2c00c0d72398c7efab809c73dac40d9ac2cb86551765a6775d6fd9663b43c217a4fbf7b0ea15d725a88f89033957629136264ac4596e42c5c54921a42f65c3df26d6016a8fb582137abe27a1016085dcbf7f33ac66a819a26ccd0c1ec4cda2a9894383fa721101c71096ff7c4b33febec196e40fd9eab223eeb519f03365dd9e39fb10bce88fa259bc52bb696fef9a26fd7bcdcca662cd894beb798b6b3602790c6da0a559f8d22ede80696e7c92b3b70000000040a5507bc8df64ff1a2a5e335ab8077c42ada9c18f51e749898a02"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:12 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') write$P9_RFSYNC(r0, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x10, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, ','}}, {@aname={'aname'}}, {@uname={'uname', 0x3d, 'cmdline\x00'}}, {@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}, {@cachetag={'cachetag', 0x3d, '&[#'}}, {@cache_loose='cache=loose'}, {@afid={'afid', 0x3d, 0x2}}, {@access_client='access=client'}]}}) read(r1, &(0x7f0000000380)=""/102, 0x66) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:12 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="980d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f7570d6e56c9c", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = dup(r0) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) 03:40:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:12 executing program 5: keyctl$session_to_parent(0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670460d9495306e58e2d4564cf7d52e8d40d410000000000000000000b0daff3e7e14d682b456f7dc99c3fd1c895b10391df0486778ab21c11b9", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 03:40:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000240)=""/164) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:12 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 03:40:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:12 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYRES32=r1]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 03:40:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@max_read={'max_read'}}]}}) 03:40:13 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:13 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x1, 0x7, 0xf15e}) 03:40:13 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:13 executing program 7: 03:40:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0x50) 03:40:13 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002540), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:13 executing program 7: 03:40:13 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:13 executing program 7: 03:40:13 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772d062a2d5f60d28", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x2c, 0x37, 0x2, {0x0, 0x80000000, 0x8000, r2, 0xe, '/selinux/user\x00'}}, 0x2c) write$FUSE_POLL(r0, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x1, {0x1ff}}, 0x18) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:13 executing program 7: r0 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:40:13 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 827.124643] selinux_nlmsg_perm: 7 callbacks suppressed [ 827.124652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3688 comm=syz-executor1 03:40:13 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:13 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f699d2b", @ANYRESDEC=r2, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:13 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='-\x00']) 03:40:13 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) [ 827.232791] binder: 3706:3708 got transaction with invalid offsets ptr [ 827.250578] binder: 3706:3708 transaction failed 29201/-14, size 0-12288 line 3164 [ 827.278921] binder: BINDER_SET_CONTEXT_MGR already set [ 827.300385] binder: 3706:3718 ioctl 40046207 0 returned -16 [ 827.311635] binder: undelivered TRANSACTION_ERROR: 29201 [ 827.353862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3727 comm=syz-executor4 [ 827.383719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3729 comm=syz-executor0 03:40:15 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:15 executing program 3: r0 = getpgid(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000000)='net/sco\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040), 0x797fffffffffff) r2 = accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) getsockopt$inet6_buf(r2, 0x29, 0xce, &(0x7f00000002c0)=""/179, &(0x7f0000000380)=0xb3) read(0xffffffffffffffff, &(0x7f00000001c0)=""/246, 0xf6) getsockopt$inet_tcp_int(r1, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:40:15 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="68a19089d194f905f5f9cc0f05642b5214858da459d504f93db162d7e033c245650fa2cc8c", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0xfffffffffffffffe, 0x8, {{0x3, 0x10001, 0x2, r2}}}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:15 executing program 5: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x8040, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x8) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:15 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:15 executing program 7: r0 = socket$inet6(0xa, 0x40000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:40:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:15 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f5f6d6f64653d30303030303030303085237e607d30ca30303030303030302934303034302c75736572", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdnhne\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000001c0)=""/246, 0x7369cd769b3e2cf3) [ 828.850645] binder: 3738:3742 got transaction with invalid offsets ptr 03:40:15 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x3, {0x9, 0x4, 0xffff, 0x3}}, 0x20) fsync(r0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 828.900623] binder: 3738:3742 transaction failed 29201/-14, size 0-12288 line 3164 03:40:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) r2 = getegid() mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000180)='fuse\x00', 0x8000, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0xc0000000000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@max_read={'max_read'}}, {@blksize={'blksize', 0x3d, 0x400}}]}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000002c0)=r4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x50001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x20000000}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 03:40:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000002c0)) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x10, 0x2, 0x2}, 0x9}}, 0x18) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000600)=0x6, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x797fffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000340)={@remote, @loopback, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@rand_addr=0x5, @in6=@local, 0x4e21, 0x0, 0x4e21, 0x5, 0x2, 0x80, 0x20, 0x2b, r4, r5}, {0xff, 0x2, 0x2, 0x401, 0x1, 0x3f, 0x1000, 0x9}, {0x4, 0x8, 0x3, 0x1}, 0xa724, 0x0, 0x0, 0x0, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x0, 0x4, 0x1, 0x0, 0x200, 0xfffffffffffffffd, 0x101}}, 0xe8) read(r3, &(0x7f00000001c0)=""/246, 0xf6) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000300)="7750e8e5742bf5cedd98f6a5982aa400", 0x10) sendfile(r3, r2, &(0x7f0000000640)=0x3c, 0xfffffffffffffffe) [ 828.937068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3766 comm=syz-executor1 03:40:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80000000000000) socketpair(0xd, 0x80003, 0xffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0x3, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c27c206170f256a01ad", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:15 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='./file0\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x124, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB='-\x00']) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=@ipv6_deladdr={0x98, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x8, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xfffffffffffffffc, 0xffffffffffff0000, 0x400}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x204}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast2}}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x37d}, 0x1, 0x0, 0x0, 0x4}, 0x20008800) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') 03:40:15 executing program 3: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000080)='oom_score\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/20) [ 828.954759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3773 comm=syz-executor4 [ 829.000034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3783 comm=syz-executor0 [ 829.188947] binder: undelivered TRANSACTION_ERROR: 29201 03:40:16 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:16 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000240)=""/36, 0x24}], 0x6, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/117, 0x75}], 0x4, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f00000006c0)=ANY=[@ANYBLOB="008016", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c657a6f75705f6996279b7717a9cc9963712c151bbf810d2efcfb00000000a7aa956c376e73d8519d4f0735cf", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:16 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0xffffffffffffff9c}, 0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f74ffffffff3d30303030303030303030303030303032303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400100, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[{0x3, 0x5}, {0x4, 0x40}, {0x3, 0x85f5}, {0x7, 0x1}, {0x3, 0x5a}, {0xe, 0x7c}, {0x6, 0x7}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000002c0)=""/253) tee(r1, r0, 0x81, 0x8) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:16 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/10) 03:40:16 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:16 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:16 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:16 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x200082, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}]}}) 03:40:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000003}) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:16 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x140) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 829.713902] binder: 3811:3820 got transaction with invalid offsets ptr [ 829.744491] binder: 3811:3820 transaction failed 29201/-14, size 0-12288 line 3164 03:40:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) fdatasync(r0) 03:40:16 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, &(0x7f0000000180)) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x58}}, 0x0) 03:40:16 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 829.783600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3843 comm=syz-executor4 03:40:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') signalfd4(r0, &(0x7f0000000040), 0x8, 0x80800) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='cmdline\x00') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) openat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x20) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'user.', 'mime_type\x00'}, &(0x7f0000000380)='/selinux/user\x00', 0xe, 0x1) sendfile(r3, r2, &(0x7f0000000100), 0x797fffffffffff) accept4$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14, 0x80000) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={@ipv4, @dev={0xfe, 0x80, [], 0xb}, @empty, 0x1, 0x0, 0x8, 0x100, 0x1000, 0x40000, r4}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x303, 0x8}}, 0x30) 03:40:16 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x200000, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0/file0\x00', 0x81) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x10) [ 829.787599] binder: undelivered TRANSACTION_ERROR: 29201 [ 829.793513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3842 comm=syz-executor1 [ 829.852926] binder: 3857:3860 got transaction with invalid offsets ptr [ 829.853213] binder: 3857:3860 transaction failed 29201/-14, size 0-12288 line 3164 [ 829.853545] binder: undelivered TRANSACTION_ERROR: 29201 [ 829.860185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3861 comm=syz-executor0 03:40:17 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0xff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='yeah\x00', 0x6bffe28037bb628) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) 03:40:17 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:17 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x100) read(r0, &(0x7f00000002c0)=""/246, 0xf6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101000, 0x0) 03:40:17 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:17 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x1, {0xff}}, 0x18) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:17 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:17 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x4000) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64658f09ea873d00800000303030303030303030303030303034303030302c757365725f69643dbebd0100c252efcda4040d50da3b658e7b6153be0c2c78ef9a5c9caf5c818f006d27d65a5074d9abe6a1583d0c26ea157f7ed101310da764150fdd8aee8e7c60f38d732efa770bba861b0a071e1d2c06f86dca8fded409561fcbe329daeafa3c9677de25dcd3871e275fb28ac36815fd488b28a5e2e7b46af9d47d6e45d445e9fbd74cba723fadacc34f05c8ebb46df5785c4d9780b16a007aadec88e97f27ed11", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 830.578078] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 830.597853] binder: 3885:3887 transaction failed 29189/-22, size 0-12288 line 3013 03:40:17 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 830.624074] binder: undelivered TRANSACTION_ERROR: 29189 03:40:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:17 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x10, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other='allow_other'}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 830.667841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=3904 comm=syz-executor4 03:40:17 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:17 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8}}]}}) 03:40:17 executing program 3: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000003340)=""/4096, 0x189) connect(r2, &(0x7f00000012c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0x80) sendfile(r3, r2, &(0x7f0000000040), 0x797fffffffffff) read(r3, &(0x7f00000001c0)=""/246, 0xf6) 03:40:17 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x8002, 0x0) [ 830.704748] binder: 3911:3916 transaction failed 29189/-22, size 0-12288 line 3013 [ 830.704954] binder: undelivered TRANSACTION_ERROR: 29189 [ 830.774034] binder: 3925:3926 transaction failed 29189/-22, size 0-12288 line 3013 [ 830.774192] binder: undelivered TRANSACTION_ERROR: 29189 03:40:18 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:18 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000100)=""/68) 03:40:18 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:18 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) gettid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:18 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x141080, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/10) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:18 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:18 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:18 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:18 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) getpeername(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10000, 0x0) accept4$packet(r2, &(0x7f0000000180), &(0x7f00000002c0)=0x14, 0x800) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="bcd9c4b704aa6f4c8048e0eec4bd3c682f265226c871a0c121743e73e73384c4d82580bb4c42", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="ced5"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:18 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67cd97c3b25f1b2bea8e838fd5f9b563aef9cb1e748afc1bf9613c8a232b1059169db5a37f8dbfa34d9a0f546a7452db927b6b2b1742ec22c5cdeef3", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 831.760373] binder_alloc: 3954: binder_alloc_buf, no vma [ 831.779114] binder: 3954:3958 transaction failed 29189/-3, size 0-12288 line 3136 03:40:18 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='cmdline\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000002c0)=0x3a, 0x797fffffffffff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) socket$inet6(0xa, 0x20008080f, 0x10000000000000) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=@delqdisc={0x160, 0x25, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, r3, {0xe, 0x2}, {0xfff3, 0xffff}, {0xffff}}, [@TCA_RATE={0x8, 0x5, {0x200000, 0x9}}, @TCA_STAB={0x5c, 0x8, [@TCA_STAB_DATA={0x18, 0x2, [0x4, 0x6, 0x80, 0x5, 0x5, 0x2, 0x7f, 0x2, 0x6c4]}, @TCA_STAB_BASE={0x1c, 0x1, {0x4, 0xffff, 0x8, 0xfff, 0x2, 0x20, 0x6, 0xa}}, @TCA_STAB_DATA={0x8, 0x2, [0x8, 0xcfb]}, @TCA_STAB_BASE={0x1c, 0x1, {0x3ff, 0x4d, 0xffff, 0x0, 0x0, 0xfffffffffffffe01, 0x5, 0x1}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8, 0x2, 0x6}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0xc, 0x8, [@TCA_STAB_DATA={0x8, 0x2, [0x7]}]}, @TCA_STAB={0xa0, 0x8, [@TCA_STAB_DATA={0x4}, @TCA_STAB_BASE={0x1c, 0x1, {0x10001, 0x5, 0x380, 0x4, 0x1, 0x2d4d998, 0x3, 0xa}}, @TCA_STAB_BASE={0x1c, 0x1, {0x1ff, 0xa26, 0x1f, 0x6, 0x2, 0xd65e, 0x400, 0x4}}, @TCA_STAB_DATA={0x4}, @TCA_STAB_BASE={0x1c, 0x1, {0x101, 0x1, 0xe48b, 0x101, 0x2, 0x0, 0x29, 0x9}}, @TCA_STAB_DATA={0x18, 0x2, [0x3, 0x1f, 0x7, 0x5, 0x2, 0xe79, 0x10001, 0x1f, 0x40, 0x0]}, @TCA_STAB_DATA={0xc, 0x2, [0x3, 0x100000001, 0x400, 0x3]}, @TCA_STAB_DATA={0x14, 0x2, [0x2, 0x908d, 0x4, 0x1ff, 0x80, 0x5, 0xfffffffffffffff9]}, @TCA_STAB_DATA={0x8, 0x2, [0x8001, 0x4]}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}]}, 0x160}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0xff) 03:40:18 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 831.807596] binder: undelivered TRANSACTION_ERROR: 29189 03:40:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) pause() sendfile(r1, r0, &(0x7f0000000040), 0x797fdfffefffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="17733abd496f2c62ac2f036036bbb279f791308b88a0ca2fb963d8b81cd2d9c83a17972d6a373871deee199c0e3c28bfd25ae96e2e6888e289756db179fb07e5f8ebf02b3e8f1b7e8eea6abcd008d34d55bf1acbec00193dc872202f789eab5cfb7af304be41f9789be9bc714c0069e272d35000", 0x74}, {&(0x7f00000002c0)="6afcedca5657ad4bf0e3574bfad521db3b74f51fbd38fb4530f3f9885de782172ac6200f11382b81e36277cb19f5173818eaa05886547595944e4ee7c632a129061a52bb380f92105efbdbc3a01f03ec8d809a173d687525df07f737b9b579521dda265a198c03b5bcb083", 0x6b}], 0x2, 0x4) 03:40:18 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getuid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$KDENABIO(r1, 0x4b36) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 831.875394] binder_alloc: 3984: binder_alloc_buf, no vma [ 831.906227] binder: 3984:3989 transaction failed 29189/-3, size 0-12288 line 3136 03:40:18 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:18 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x15, 0xd1, &(0x7f0000000540)="1c5d6d1584c47fbf7044e59f3f5824ef3b9ca642dd7da2f384c08a58663438f36a847c8392b53305d2a210412ac6d0bbf8e4780e0c970d0141e0672a2e95cb12bb74cecc43ba893956267c9b4041a8905b7d95afe0fc068dc3fdd8978b0717a017d6215eac2e01c8bc6279c432b524e88cbe90aacec887fe42748afa763e7670c134d4e0c3c481f53f97d1a3e3c828bacfe451f27ebc211828b7227d89301a13a555b3376093b35ad3cca1723199c12d2d89dd467bf0fb55ebace70b89bdf1b934b5d1808996c60e962d294f6c68cb0646"}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 831.936398] binder: undelivered TRANSACTION_ERROR: 29189 [ 832.010384] binder_alloc: 4006: binder_alloc_buf, no vma [ 832.038151] binder: 4006:4009 transaction failed 29189/-3, size 0-12288 line 3136 [ 832.077176] binder: undelivered TRANSACTION_ERROR: 29189 03:40:19 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:19 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x4, &(0x7f0000000340)=[{&(0x7f0000000480)="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", 0x1000, 0x800}, {&(0x7f0000001480)="80c978a1c86606d0ca08138da2391469d0ff7389a46dfa67c2b003fb0c335e08c269bf4bc8042085ce5433fc7b131cf150eeada9044e26f505189278283de98c2922721838ea2864a93b0c0c33cfc9707e62ce96b28746bea34cc7c1739369decf40c46ed72345a5244d30549d2d003011bb65fd20744b2d40c48e69dab7f773cc25b7f3763ab048abb3909debcc9b38372255fa2ee769293e85b4240816bce86c8de6e1247f6a1424ee4a34690f8d5cba3c3270f567b87a935a6ad608d9e644d5deff7bf53fb1b397e30778de61780dd8739c72b5f64072b3ab0be96fb625f0", 0xe0, 0x56}, {&(0x7f0000000140)="a7a9a4c4ac16ec171342534ec495a1f08670808a5bffeb876dd56b45401e0f9fcb0b0794f1b50c526b63854b21155d914e20cc3dfd0bf387b5620719f2f5a9f44b7fb25534795b284230cf25527f37283534a0f50113924b68ac55af51150ba3ce586f9ccd16cef5d48ec5ef45bc014b9d2b5de17f1d219606a63b841bf2fc9269717c2ddecef1f9567b8a23837dacdc4ddbf61a5230e254", 0x98, 0x9}, {&(0x7f0000000240)="e56c8dfcfa25fd330dee06cf54697b8a6b384752685f459b0f0cb1cc2c4ba78e6927ebb8cf68ec693f97c483c8ffac99df425b562503c11cd5f70502c9111452f4cf8313e80345f25bb5c4dffb5c245e11b137ecbe565baf032116606b7c5dc7e2847d28d02531401b14688f5d229c6d6517c12f7dd6ee422ae78f0a9bfbb5fc1ec2216b24f6df5b58dadd5804ac457f316a0d5d6edeeacfa161bf09257218bd99cb0ad65b67d3b7b8001cc68ade2f9d4c9903", 0xb3, 0x1}], 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="656e00223b39cd88271d9e958bb28998983d01f64fbe4c308e564b8ccc53b0b8001b9387f2967a2fe0f1155abe436c6d89613dd7b36315c75228a3037b3181d7712d6f39324335026f4927a8eb841f742363e6c0371179e88d54a3ef1474535f9b2e0f0b8e6f8062dfd3ed4c0c74b37942fb56470ed889f19f23e9855f7f3594127dc2bb3c6627da7bd27297d5a7bd64c78aaa0000000000000000000000000000"]) 03:40:19 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x115) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:19 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0x6, 0xff}, {0x6e, 0xfffffffffffffffe}, 0x4, 0x2}) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:19 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x15, 0xd1, &(0x7f0000000540)="1c5d6d1584c47fbf7044e59f3f5824ef3b9ca642dd7da2f384c08a58663438f36a847c8392b53305d2a210412ac6d0bbf8e4780e0c970d0141e0672a2e95cb12bb74cecc43ba893956267c9b4041a8905b7d95afe0fc068dc3fdd8978b0717a017d6215eac2e01c8bc6279c432b524e88cbe90aacec887fe42748afa763e7670c134d4e0c3c481f53f97d1a3e3c828bacfe451f27ebc211828b7227d89301a13a555b3376093b35ad3cca1723199c12d2d89dd467bf0fb55ebace70b89bdf1b934b5d1808996c60e962d294f6c68cb0646"}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:19 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2c}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grous_id=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) mkdirat(r1, &(0x7f00000002c0)='./file0/file0\x00', 0x10) mkdirat(r1, &(0x7f00000000c0)='./file0/file0\x00', 0x8) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 832.780421] binder: 4019:4021 transaction failed 29189/-22, size 0-12288 line 3013 03:40:19 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$key(0xf, 0x3, 0x2) getpeername(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10000, 0x0) accept4$packet(r2, &(0x7f0000000180), &(0x7f00000002c0)=0x14, 0x800) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="bcd9c4b704aa6f4c8048e0eec4bd3c682f265226c871a0c121743e73e73384c4d82580bb4c42", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="ced5"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/user\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x10001) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @mcast2}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000140)={0x2, 0x2, 0x1, 0x6, 0x7, 0x7}) sendto$inet6(r2, &(0x7f0000e77fff), 0xfffffffffffffe64, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000a004e2408000000ff020000000000000000000000000001000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a004e21000000000000000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2001040000ff010000000000000000000000000001020000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2401000000fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240500000000000000000000000000ffff000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffff000000000000000000000a004e20ff010000fe8000000000000000000000000000bb00020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2401000080ff010000000000000000000000000001fbffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008dac33358641648eb79"], 0x1) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:19 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 832.832556] binder: undelivered TRANSACTION_ERROR: 29189 03:40:19 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000280)={0x6, 0x1, 0x3cb246c4, 0x1000, 0x3ff, 0x80000001}) sendto$packet(r0, &(0x7f0000000100)="304c7715bfca1ef8a7e5105a4ded1eda35f342a7eebe5b5bf3f538ada6163ef3c77717eb4bb1c757589010a513c8452c3e6196ba1e894e495462b3449751a3b3dddaec20eeb60c0e1b3c549d9322d59b0aa53df6c2a102bd", 0x58, 0x10, &(0x7f0000000240)={0x11, 0x1c, r1, 0x1, 0x660, 0x6, @remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400102, 0x0) 03:40:19 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:19 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) gettid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000100)=""/2, &(0x7f0000000480)=0x2) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000370200027f000000000000008100000000000000", @ANYRES32=r2, @ANYBLOB="0000fa47ae76b812cb6d41f8d9b95a2887a5d04fbb17e7deb0699cfd0b60f270454a19ab220f11d6f07c45d18897c6cefe1cedc7933302c699d558c3024fe361c7b84524f9df28ba2f2450a81220347ba8d24bec4e2a359e3aef812ce10d7ebf2fd5ef2e97e333f8baafb6142d29745a81bffa1b3d2ad993a1af2aa4beb225"], 0x1e) read(r1, &(0x7f00000001c0)=""/246, 0xf6) wait4(r2, 0x0, 0x1, &(0x7f00000002c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 832.896031] selinux_nlmsg_perm: 6 callbacks suppressed [ 832.896039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4050 comm=syz-executor0 [ 832.899556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4049 comm=syz-executor1 [ 832.903927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4053 comm=syz-executor4 [ 832.904706] binder: 4055:4062 transaction failed 29189/-22, size 0-12288 line 3013 [ 832.905051] binder: undelivered TRANSACTION_ERROR: 29189 [ 832.977436] binder: 4068:4076 transaction failed 29189/-22, size 0-12288 line 3013 [ 832.977634] binder: undelivered TRANSACTION_ERROR: 29189 03:40:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:20 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = dup(r0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000340)=""/179) 03:40:20 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:20 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:20 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101001, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000006c0)=""/246, 0xffffffffffffffd7) 03:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:20 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:20 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f00000000c0)=0x80) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:20 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr/keycreate\x00') ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff2000/0xd000)=nil, 0xd000}, 0x1}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x6b) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) [ 833.699276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4110 comm=syz-executor1 03:40:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 833.714812] binder: 4116:4118 got transaction with invalid offsets ptr [ 833.714841] binder: 4116:4118 transaction failed 29201/-14, size 0-12288 line 3164 [ 833.715071] binder: undelivered TRANSACTION_ERROR: 29201 [ 833.719165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4123 comm=syz-executor4 [ 833.765407] binder_alloc: 4128: binder_alloc_buf, no vma [ 833.765425] binder: 4128:4132 transaction failed 29189/-3, size 0-12288 line 3136 [ 833.765586] binder: undelivered TRANSACTION_ERROR: 29189 [ 833.793534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4140 comm=syz-executor0 [ 833.803131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4136 comm=syz-executor7 [ 833.819355] binder_alloc: 4144: binder_alloc_buf, no vma [ 833.819373] binder: 4144:4146 transaction failed 29189/-3, size 0-12288 line 3136 [ 833.819528] binder: undelivered TRANSACTION_ERROR: 29189 03:40:21 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:21 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030ec1782436f6854df51c230303030303030303030302c757365775f69643d00000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:21 executing program 3: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001280)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001380)=0xe8) recvfrom$packet(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x10003, &(0x7f00000013c0)={0x11, 0xf5, r2, 0x1, 0x101, 0x6, @random="f42a51955261"}, 0x14) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f0000000080)=""/246, 0xf6) close(r0) 03:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:21 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) fchmod(r0, 0x10) [ 834.449787] binder_alloc: 4155: binder_alloc_buf, no vma [ 834.472123] binder: 4155:4159 transaction failed 29189/-3, size 0-12288 line 3136 03:40:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:21 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:21 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0), &(0x7f0000000340)=0x0, &(0x7f0000000380)) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x400, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x200}}]}}) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='pipefs\x00', 0x80000, &(0x7f0000000140)="5986d9698cef3fe750a3250de7d758") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x1) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) [ 834.514213] binder: undelivered TRANSACTION_ERROR: 29189 [ 834.541031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4168 comm=syz-executor1 03:40:21 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = dup(r0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000340)=""/179) 03:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:21 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04009b", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendto$inet6(r1, &(0x7f0000000040)="0e3d507a40e5629551d96b3569806fe7b41f083f88f7fd7012a6b916aa1f9250cc9a9df51677b4bd0d968c70daec6c184d1981b83b1e2144b7613901390b996b2e052e317c76381e65da42989235df7848087256b10f622cafdf5e8d7b96d91f8760919ed0cbbae58c7d01fb0184e7ef6a8834e459fad283907c9326a124f2ee961204f3bc9a43e7e8ebce3e4bc6124e0e0790df795655784e21a48563f71e1ee92059702a585471ab2e82e22813c125712641dee5665e0f89e353fe", 0xbc, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0x21}, 0x1c) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xc4240, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x20, {0x2, 0x4e20, @loopback}, 'ip6gretap0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:40:21 executing program 3: r0 = creat(&(0x7f0000000000)='.\x00', 0xa0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x7f}}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) [ 834.581772] binder_alloc: 4175: binder_alloc_buf, no vma [ 834.581791] binder: 4175:4179 transaction failed 29189/-3, size 0-12288 line 3136 03:40:21 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = dup(r0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000340)=""/179) 03:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 834.582043] binder: undelivered TRANSACTION_ERROR: 29189 [ 834.651239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4195 comm=syz-executor4 [ 834.652481] binder_alloc: 4190: binder_alloc_buf, no vma [ 834.652499] binder: 4190:4194 transaction failed 29189/-3, size 0-12288 line 3136 [ 834.653377] binder: undelivered TRANSACTION_ERROR: 29189 [ 834.655716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4196 comm=syz-executor0 [ 834.704906] binder_alloc: 4199: binder_alloc_buf, no vma [ 834.704923] binder: 4199:4203 transaction failed 29189/-3, size 0-12288 line 3136 [ 834.705200] binder: undelivered TRANSACTION_ERROR: 29189 [ 834.775622] 9pnet_virtio: no channels available for device (null) [ 834.791759] 9pnet: Insufficient options for proto=fd [ 834.856192] 9pnet_virtio: no channels available for device (null) [ 834.862742] 9pnet: Insufficient options for proto=fd 03:40:21 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x6, 0x200000000080) 03:40:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:21 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = dup(r0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000340)=""/179) 03:40:21 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0/file0', [{0x20, '(self'}, {0x20, 'group_id'}], 0xa, "c12d4b9d84cb675c6c0c0eb35c20f6878c8a"}, 0x32) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x401, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x5d70ce) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 835.281526] binder: 4219:4223 transaction failed 29189/-22, size 0-12288 line 3013 [ 835.318035] binder: undelivered TRANSACTION_ERROR: 29189 03:40:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x6b, @empty, 0x4e22, 0x2, 'none\x00', 0x20, 0x3, 0x49}, 0x2c) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0148b665edf15c56bfe06c46a5231cad24f19cb09f90f05d1a9046bdc4a4a5756f8b330a88d06abd1daa006b8ab9bef0d88c4f606a85447058e119ed5094cc8127f6979195630dd5b49db0971ac7831b772e64a71b1f1785cb28753587716d5b6f1a660b6a0e0f2bd27493f735a8726f17623b00695235b5a5b541077b4d097180ba9f293036e53ae5d77a049b741170ac954fcd5dc5711df1196fd11dad95145bf3eff22b8b6bc7bccce448"]) 03:40:22 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) dup(r0) 03:40:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:22 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r2 = getegid() r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f00000000c0)) write$FUSE_ENTRY(r0, &(0x7f00000003c0)={0x90, 0x0, 0x5, {0x0, 0x0, 0xff, 0x1c, 0x1, 0x1, {0x4, 0x8, 0x7f, 0x8, 0x1, 0x1, 0x4e5c, 0x6, 0x0, 0xab9f, 0x3, r1, r2, 0x1, 0x2a40}}}, 0x90) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) getsockname$unix(r3, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x4) 03:40:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="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") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/133) [ 835.489924] binder: 4246:4251 transaction failed 29189/-22, size 0-12288 line 3013 03:40:22 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) dup(r0) 03:40:22 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="dd98b718ef068851739b819e9e160d", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 835.557706] binder: undelivered TRANSACTION_ERROR: 29189 03:40:22 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x1, 0x0) lseek(r0, 0x0, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x5) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:22 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) [ 836.105967] binder: 4285:4288 transaction failed 29189/-22, size 0-12288 line 3013 [ 836.139505] binder: undelivered TRANSACTION_ERROR: 29189 03:40:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:22 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000840000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:22 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x10000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x800}}]}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000080)={0x4, 0x6, 0x1ff}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000140)={0x81, 0x1}) 03:40:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:40:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:22 executing program 2: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:22 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="3dbd876a9ac061fe079ff88dea59b21e3aa1c1d8ab2a43ed00a3ad36b4828ba48e63624f0d25478a0dee04d6b5adb9a9fcbd2ba441fbeadae8d513703dd4fe82b7e58885a9e9ca3a55bb1b8231e23cb395d39333bce6cd657440cbd1860ca0a7241e104b3dfc14955950", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0xffffff34) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000000c0)) 03:40:22 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:22 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x2a, 0x6, 0x0, {0x2, 0x2, 0x1, 0x0, '*'}}, 0x2a) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioprio_get$uid(0x3, r1) 03:40:22 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) write$P9_RWALK(r0, &(0x7f0000000480)={0x71, 0x6f, 0x2, {0x8, [{0x50, 0x2}, {0x2, 0x3, 0x3}, {0x1, 0x3, 0x7}, {0x2, 0x3, 0x8}, {0x80, 0x1, 0x2}, {0x0, 0x3, 0x6}, {0x20, 0x2, 0x8}, {0x64, 0x2, 0x6}]}}, 0x71) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x797fffffffffff) read(r2, &(0x7f00000001c0)=""/246, 0xf6) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000001500)) r3 = geteuid() getgroups(0x1, &(0x7f0000000000)=[0xee01]) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) write$P9_RWALK(r1, &(0x7f00000003c0)={0x4a, 0x6f, 0x1, {0x5, [{0x2, 0x2}, {0x2, 0x0, 0x1}, {0x2c, 0x1, 0x1}, {0x0, 0x3, 0x6}, {0x40, 0x4, 0x1}]}}, 0x4a) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x440) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000001540)="a85a3bd91dcf3e8bb6e19f78c2b893c8486cd8951a01538af0f8275a6139d96134204274e9d12e4d6a7f9e940994833d6dd8557ea82bb79ae1670100ac33ab208e8cf9f58620b4f892f3f840cac9ac0f82b56153567bccd1275cb07b1598a6b8e20cdfbd25bb4384d339826a3cf24668795f58b7d17a63af9be700cea8a82be139ba500f396715c886ad60dfbbf2912d1201c5c6d1d5b63f1be41484d86d2b8d557e4cc5d250533ceda442b345fa9282cfc70528e6a44cd860781555129f61c5391a0548406d1bb68770979d") write$P9_RSTATu(r1, &(0x7f0000000100)={0x6b, 0x7d, 0x2, {{0x0, 0x4e, 0x80, 0x80, {0x28, 0x0, 0x4}, 0x28000000, 0xfffffffffffffffc, 0x80000001, 0x6, 0x0, "", 0x8, 'cmdline\x00', 0x8, 'cmdline\x00', 0xb, '-mime_type('}, 0x8, 'cmdline\x00', r3, r4, r5}}, 0x6b) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000500)="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") 03:40:23 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:23 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000001, 0x40c00) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) ioctl(r1, 0x100, &(0x7f0000000140)="ff9d8f449393511f41347ad5ff1eaa07312693d85c6a8a7fe2793ca6fe879eceae49abcc4c") prctl$setendian(0x14, 0x3) 03:40:23 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000300)}) 03:40:23 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffefffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000300)}) 03:40:23 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:23 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030faffffffffffffff3030303034303030302c757365725f69643d79581c2ac41699276e79c231386ad6285b282b8ad65bdd31eff5cfe614c1f5e51c86a12e434c7b58c3eb9c5b00904dd539409bf14a1be4c741f085fccd", @ANYRESDEC=0x0, @ANYBLOB="2c67586f80705f69643d926396c8849450a43ee89329fd0daed5514e70f97505e92928e53cc54aafa0707514903392c279e3f16e7932b52d687928b8930b8936d943b4f2f3c7418fb84002914d772aaa3b91bfcb26ee805dcc1525c886d5dc90e0c1c8d4c535dce347cfb798cc3a1abf10dd2d3856d5999bcbbaeeb606fd83ae718de313b3f24d6e4a87d39113964d230c848686f693df96", @ANYRESDEC=r1, @ANYBLOB=',\x00']) tee(r0, r0, 0x3, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@ethernet={0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="cca4a643204e823a20eb44542c405bb88cb55cf8fafc3e4fd2dcdd646a4e84d36c2d51575a057fcbbdad828f49a424c3f447c6bf2dedfee2ce33b6ce0b1ab2391c4cf4769f5abfca423c33db24e5026bcaf4ed3169a5932b60438c925ff8feb41ff102450ae3dd69493d8a1fd3980327aaadda8306ad29b14cf3c125278f805958a34054367d2df57786cf3f338020ebe121bd308a62bb87c497a50eff42b57870c7cfee088d", 0xa6}, {&(0x7f0000000140)="58d22eca6b7361fc59bda60d2bfef3b9b633c26772cee7de2e0e70921a9a3c5b08946bc67a0c88bca452b2a80b98081e09378d7eb3d826a7e53d41715b99e0b918a447fed70ae9878c648d668434e93059ab023a83c928c8a300d7d3dadd3110f455f5", 0x63}], 0x2, 0x0, 0x0, 0x40000}, 0x200048c1) setresgid(r1, r1, r1) dup2(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:23 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0500"]) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x20c000, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x100810, r2, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)={0xd, 0x7, 0x1, {{}, 0x5}}, 0xd) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000001580)={0x2, 0x270, 0x2, 0x401, 0x2, [{0x8, 0x620, 0x8, 0x0, 0x0, 0x2}, {0xfff, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x4}]}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x4e20, @loopback}}}, 0x88) r3 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)="db2e2900", 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000340)=[{&(0x7f0000000480)="8ee1d3686f0d2b18af896fe7fb0d47076c6ef5b8582944bbc262f500fba751e4503543546253e3a25858e5bdac33e515390477445fec8d80176fa01271fe8e551927dda11652208165e753105580f958d9e128e04a321f1886b240860967e9333d1942eca6d8bc87c9193bee191621f27a127daef047b78c41f53d2e4965ed53b3f8bd512fc429a8facc829edb3edff546786de4776eb51961259259b9b42e2bb16585da00998a4ad00898e1fd8d4287054ad13823c735a19613959fd6148502d93393cbb1eb", 0xc6}, {&(0x7f0000000580)="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", 0x1000}], 0x2, r4) 03:40:23 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000300)}) 03:40:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_mr_cache\x00') setsockopt$inet_tcp_buf(r2, 0x6, 0x1d, &(0x7f0000000480)="ccb69cfbd0a773b4a7d74975c886b189b7f4e4b848fa8430cc32d61568144ea17fac52eb828c456748ce80d79bd84c7fa3f756ccfe0b5d43569e14d49c9d9d372246c93261310fa3bb0b85b859b0946c347666b18734e98e830c56c972484000b4c7b549bdde7abbd452a81c2a1936f5f6337a3fa4817f89c9db94c2ce01b6a63ffbb85754e7c72d59e760f3eba7d6aab1eef7d2286c551d540c44b3c5677c8322e5df24866d432d04a8da64c569116fefb419a54379a912e9a1208191a2a5193a82951c4a254cdd6b16738473e9f8fc2d45cd590c2d8f051c0e23d7a2f4643f7384eff691871a", 0xe7) 03:40:24 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:24 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="66643d7a610594310ff019380833de33e714a83588c605b6ed1e2600525d4f861c7cc14f36ceade2ce927ee04836e50645bef17c45171a474df74eb01fd616a6234c2705e712266275670766e7679a449138c55ff493e71345825d0b24ad3a8435e38f1a36471df90224aa5508935eebdb7b0ee281d05ae72977630f764e9b34c32fa421c986cd346081e266410f40d085e2c8d2e450b4546ab0fb5cd4d742df1d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x8000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 03:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) 03:40:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 837.893921] binder: release 4417:4420 transaction 57 out, still active [ 837.905951] binder: undelivered TRANSACTION_COMPLETE [ 837.941773] binder: send failed reply for transaction 57, target dead [ 837.966603] selinux_nlmsg_perm: 9 callbacks suppressed 03:40:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r0, &(0x7f00000004c0)=""/246, 0x71c) 03:40:24 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001640)='/dev/rfkill\x00', 0x200, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001740)={'nat\x00', 0x0, 0x3, 0x0, [], 0x5, &(0x7f0000001680)=[{}, {}, {}, {}, {}], &(0x7f0000001700)}, &(0x7f00000017c0)=0x78) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000001, 0x3, &(0x7f0000000340)=[{&(0x7f0000000540)="f2cd3a8a191056a2b7c5bdeea2ae593eeeb56b99b6ae78b28192aa87fe83078c6c0202631803c3f64f6118166897dbaefc81c7044f35ea788715075a14aeec99e265fba77ad2658bb7a376efcbf0aa31dd4f31b63ed19b3599162d8aebd74e80915497d350454565500da287c000a273363e888fc5eecda6d655654843925722882409715bb51b7b13ffc931d5df4243ca0fcf173e6ad70ef2572aaf98dad3014a0d4163824392656b84b8166f070dd37eeecf23368b1b7fb8a8cfcffbbaaaf5d1f0318ca33c615a4e3100f6edf38d6b9c1b52f5c279a90a629d90b6e6b82825070f6802ab43792ffe0dcf3f3f71e04c0e832372948b5d73dc59fadb85de18391e100489969b0c1ea45bf1e172a024e19b645b1e9dcc03a411014c9180b645a762fb39f220ad415748f2ce8b463032a7100539aaa1b872aec505f5c9404f1134cb2646dd9d76a3633bb84e72313c0914c46d3b5685acc25b5b9eb837e5b10c30d20b937e32979586d1f516bdd7c1108e1c829fb3b8188735ea4cdbfd086567b974c08134bd9924310525d00a16d23e2f9f7cc5b52f022f7c80a831d921ee174b76a943b72be79f60d5f80e17cebebf255e9a945de04493c934196686a9eee8560963f415e228076096d3f01cc74a6bcacce89655d9cb42496c7594755df55974d2375fe42d88d99e9d4ab1d53843c44dd342949ee53b5eaf761b07d163e9c6e8e06d6ffeeda36edf4336402452e8ee8f88b945c7b83abcd5a572905162540665f1dc35e100659fe8f4c555b7417b13197fa5da567dce4d82116269b996b6afd509b9c400d238b184d9e8f108a760ae115b27848b14227f349a2e74e8999029fce2fff75567dc4e7921188d5ae63feffae63ea54a2caa4916187b7c1541df4d7d911ee6b7b67c0ed79602634495e413633a3bc5d069a712ac460d80e4b8036b21949a244088958de71ff798fdc9cc20f49ba85f8189c71c38760282f9ef1c3f517af66ee4a325a9e3d7d6a126874c611e9491f3ba03afcedeb6fc1b33af1e6cf3eed559f10bf446564936a66a55a0382484a24e9d4f0497cbf6c8fa49b00b450e5b14a516e277a0ca332f3276d971bd44d7af91a6890923278712053cdefddebf7fb946e90419940b07a5687e44efc0a38044d1f75baa700285847b3b706aa11b29e7a7869af6fd4b90e0a1a92a7603bd592c2c598c30ac8dded4c376e6c09acc2160b01a27214024908b0fe788bd71c5613e1d95226b805f7b6ea90d112ce751f52031c6f76d019209e707c24674865d82cbc8886f292bd3dc8ccba494a618df8a811963470d0a4e65947fb220c218308fd0f1aaec4af0e885d82f7eaed5fdf3002e2691191e4ded2d8cc05abaffab5bd319a926fc2b5b9430b3d4a98cee05d5df16c6b05427e0d40386063206ed4d0c70b48b89f33b71c7ff7a0fc8596cebaecdc75a7a84ee656cc304dfc8086f30a3a9ef72865b7541d4e39ab6db64c1c7c6a8cbc473ce916ab9fa772fcd8649c7aaa7150f1fb4476301819c1ac5739e6493dadf29fe8035490d4c365ab47f34b7745dbd868cc2f8a5746697b20493f05ee32bc82b19fcfa0fefc31ef8155fd550228667286855e3f7e59621dd723c8f2363a196201dfbc2537424d125eb88244666f6d077ae9444f013f472a09d79f549901747cb9bc021ad04bcce94730442b874060e0c2e86c741a57cd97d18424abffa2f862559873ac41101123216be9ed0e332a679533b63356669aaa20139077d3c79b9d060a30b02f19694f76a8da0524011a5e72f5766d327e1846abf35710fe2a694f5131e812291be9877d8957a6187572d49e341a127db6f46fdcee447c0aa9a17d415ac045818ab84c13d27c6df5c589b85c8239d6f20b616abdeebf33cb68001071a14fa9eac3828077065abc3e935297d780317003fd547800ac0c443128803d4680462c2d9a3990e8b7550353693bc6fb5231f219602c85bd6123d94cfdccc502d82eaefff8afe9f2261fc33a4a7728e7bc86bc4d9f9a00d965529406f4d9e5711a4929080f3951bca137db2a3bc43a057cb6dae8bd980457b339e0fdad4b629344fc7ebd2318bc106d6b30f20394c1c48c4079a407fab1f4442a5f0c603636c70c13df53e4e706de875c065ff0742414089cedfdf7e62388c10a67fdcc12a082e3c62b438bc61368b824da29eb3983fe15e0f6aa869ee1725ae926d62b57dbe63028f8e556830a0b8ce8fa294c3433ed140079989cb7f2e4d2b2d9bbf721e4bd9ef047273a6bd48b1cb39ffad6b0c8afa5585c29d2747f160dd515a90b190a302666884c443b50f887af068ec02fa8a30de4537a6745975724d3d17dd01572f3e468dd91c0e3196e120dae83ce5ebec0574e5ec709ba5c312c0c68f0d83d0710eb01178111053548ccb0d9e9e2dd42a19094a07f717a59aaebb7261de6ce75d9c52da5c71aad196a45083c19541fd1e7e1746ad81f40efdfd96f917b1b6596a170a187cbf11a597a869890be6977a1101b5b151e9b1ee0de7ddbf507d46d3dd026136d39bae12d53dcfc91a85eace598ff57e0831123a7979d64148d224d9f2c61c23216bbb9c04d5c37e769f082fd1fac638f6f8ff0a31dac04bcc1c4e94a3e1dc43f82f1dc3e9bcee7e6dad64594ea340c32c53f7117c7e23db1ca642611fa97c781681359e2086da3ed8b1bdfa73e5a38d44f30b4184f3cf3b9b0203d7103634365de22b35969d382c996f79871f53dbb6ae8f32ba0f81d55c91693eec0600ff12912498a31629be83afc53601487526b1504e58905d14500f2026a1023d2f7ccc24aa90263110fff0a8f49adb9c81bc73715e3a06a8a9e2e5539d62922ba0690645387f93305ffac99dbe2344d43282cef1755f1e3cedd2a9f95985ef8cb6944532447fcdb9216490620cc1e62ba96f0fc2ac1cf38e09dcdfa3ef3c1302a856e15139bcd440502ce561811f4121b7ceb763a017dae0477bb3457903749f9338bb7744686df2a79a254bd45f8fd42dafbb227792564ffa626e5b2fd86c888a06f5fce8b42e9dfeccc579cf3e81427eb8e6207f6f4cc4ce1948a18e2f7c5e767532e2ac23acf9538372cf5f4641a9513dcec029615983c2cad4ec0c8ec5610f574d29554c7b6bdbbbd40afd75c9e75b85c2b0b96c8a03f37b18146155da04afdeaa7694046718d705b8fb23212b321b75b372980405997e4d16ceaa4cca19e30e96908090d0e7c883cb2238884e979f865577e1de43a6f0268ad7218f95538544fbe002c8b3aa08fa7047262eaf0896019b3d4aea1a7c7594c56ecff41f837d83cc806d7eb298df8d9d74e4ed5a921aef03624547bad2d649439618db89582bcf4a767446ae8349d0869adcf41576544589a529337654cf67eaa391a73c9236638257d18a67941fc37cf345fd31fc7e090e270f232ea7733f15989ea931485fa1d952db1b7422884d8fe8a9bd007624ae6c2ae2b65586b99f508f1df3ea23859436fddeec4b15724138815066dc68a2d383a12166c9f98fb6d87a4c5e957263d49c43e6578c10de3253c9d25bc9c0a83d229d81d5885be812a0bbfffa31626752d3969dce9ba3d2abe68547326c1df499bc26c23aa052bc25153560258e4e97b2187a1084f46d6474d64f0e23d70b7937954a389225c8fb171b97e9296bdf85622545ce701c2a7b653dba09aa91a040f1f52bbb73265b7bc4e03ad77618fbfb21353ce2d97719cda0e702ba5dafbcdafac1bfd592839b55f3c9e01fcb81cb0a9a77cd25f6ed98b860caf76478d3e60245262f73c4187170fe666c305900da525f5a47e3e4637ed459a197b7dfcae81616057a69b6fcbb9d3c9209eb1e5c93aee026b1934fa9fd20dfea24eeadc817d241b7ad90353b4578e09c6759bdee676e98d06c565004c8c65430a8b9cda1142a4af41cb3321c5b2a27d3e2f84eb93f36da20cfc12dcfdcdf5be1000141a3839f3512fcf7f7515d6da697f2140c947b7542c212733ea67b0d912f12aa290cead45963d1e69a88e7e87d8937a5e92787ea23ad294ea0abfdcdb4123eb8155c865439d5bd4ad4099a779134e807d3c374aed68176bb8b5beedf46e619c3250eb8815198161a267f683f5777089150b03501d6dac388893d8b96c63bf00ecfd417cca5d8c1b83f73622d7ece99ec83fc506acec693ad265cf7fe0e734b598aec1ac956c2a08f9eb63ac818f0b9724137f6b7608c7ac1183a458b24d76ffd0094b1d937854fe40aa378640b827ccc2b40fe7b55998837f7c95a09f5d4e2658bb96d707dbfdf8f85f77808dbedce51ea1600b6049cd0372755a5a8b90f7d9ff9c5deeea205028617b4887b2feafff4ec642918d533f1e8430dc39fa528e758f175374ff8e4e4793c383532e60b7b71409c70be709d492972ab67193c465c926ea9cfc50cc12fffd7fc940f6e6f1239ea77c4d927cf738be577db465e177c1b73f1b80e6bfc44b15bdd1814f47b473f5274a56b99cba89b0e94e4dd15a7862b695c296c96201356ad5138a2b15d251a7aae5a7af1eba631d46aeec86a38d7437d233d415ffa8107d381d8bcdf494ac27186e83bff93a57906b783dbaf1aab1622fe12f07920620c44b490395405f73b7fcc9f4c5005ab46d1a25cd82f02e6f59f114244a1840d4d506939586f61043c65650ccdcbc4a3c3f303ccd1a972a4ad1cd22c17bb7e068734e2f3e13bc2fb9bfc8d74be145399522f14d4686654d8acbd03376bcf83c326248885a43b0c82a44759e4cf1f653a347d04fe8a628ec4491254c7bab38c507c45ced58eec1e3faa4caee0aae5dc835dceb3dceff16f7154dc6d17faec23c76add42e482dd512c89afef66fad17e708257d7eba9430726714b3c48ffce6ab24324f57c61674c4c6f53f1464d1ac06fb302aa1fecb5f0163b760102934faf357a3b6fe280fc533fab06f2d213c3d6b60d62c2611ea3f80d6fd02a073ad415adcbf86ff7db53b8acfcc657ffe8cb3ca8eb4acf4b56744513c7109698442411beeab934cfdaa7c8ef6af1f07b110b353133aa486748cbbbbb8f28802f638f6b53417a2ecce5c263e4e6e5128a8da4353f1fc1796e18b9abc0fb30ae66ac446438a3f6a879e0eae32104edbb7e8c0458babbef7e917b781d720e5eb5c9618ffff4bf2cf50cd97731dfaf5f130acb5783c477d1eb768e9e6abe39702b9c82afe8629a11572f0bdaf0635db90685ec2ddd0b0a77a1e18aabc5aa1dfee63e5fdfb5f7acba8d0ad1b4bf79660dbcfbb99c179325ee8b0fb9a8c3dfbb1922b6530e4abf46b097ba8e5cc82900b23ada2a62c23b1af216b54098786eb39cbf013e10078712eb7ad6559aea375fe47595a0057db1bb5fdd4d0d82d9e31658f0c49609de93563d8372fcb49a5f8e756a108a2fcb439354a8fc3a137f0c6d8e2f31db0c8c3d04b482044691167d2d1511bc2ef635e45af9fe097b006e7906e4f70303ad064284d351b3c21db0e73fc7cffbb6b1efaa0a455281a9e3d1d8c0163000201111a60b2429d701dd7c59d8736a82952633c3e8c3f8c7b64c1cdefc818c2ac5495e0af85ac5cdb2519906bbc7e4e9b1d6493a91afe6bf9660b39d2061f171556ff1042f92fd451d972e6af276e3b65dc419ea74b1b9176d6079098bbbd477ae46ec93d9f3c319fcd8e86e2c69f9cc9b2f92a78efa8c86abfdce1c066dca35c74d292d185dd6999392c4011ea203bad2bc808adfe9d623195dc15c839c2d74630bb8c0d5b1dc3fb45acf4936079e3dde56789296015d6f27eccad5d68f78fd603964467e023628f98d532a13", 0x1000, 0x6}, {&(0x7f0000001540)="9a9fc615a1a83f9f864d571c4b9144a300ddcaf1d95c33ac6a405ee4e0ce4055f28c541fa828083177f7d660141fc870da633e152c2871d23ccab091410b56424450538c71a3bc980b8258a3cd12017a753d168fdd8a193003c40e0b19cefb897dcb72c8dd865e119436692d912e150fec303a29c6a97981b78adce07d76ad2aadf3ae2478bd3a093cc8a74045465cb8d9166abe938f9e3f28699ec59fcf310a6465c46a52b7669622de57067b7c83922cb9e52a98619c612bd60cf3b663a45933a5", 0xc2, 0x4}, {&(0x7f0000000140)="e20005e0629987b42d456cf4a8d8d8d628694097e6117b9fddaf60c096e7773a8a6259bdf24c2816bf422dbbebccef16cb87106aa36023757e3894b877", 0x3d, 0x3}], 0x381000, &(0x7f0000000180)={[{@notreelog='notreelog'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@autodefrag='autodefrag'}, {@nossd='nossd'}]}) getdents64(r1, &(0x7f00000002c0)=""/49, 0x31) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001800)={'security\x00'}, &(0x7f0000001880)=0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000001700)=0x2) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000480)={{0x2, 0x4e21, @rand_addr=0x9}, {0x307, @random="58d303ba39c5"}, 0x12, {0x2, 0x4e22, @local}, 'veth0\x00'}) 03:40:24 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) fsetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6f73782e2f6465762f662ab68c975450ee4cc58c77303c900c8f75736500"], &(0x7f0000000180)='\x00', 0xa1, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="cb4ec000d789962d3093fbf6a313974f86f119ecc388e64c0362e89549e7f8ec6f304836fc9b29e2", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000000000000000000057e989239dd6a86853c7ca43b9e4f3a0f48c9455af45fd4d0b0f97fef1452363a8ca26e54171a7fef7d44303285861396c711c654582c1c50832518ff7a4c8326ec07d34c4f320a7694c4c9c104947ac49c65e2d8c37bd1ee04beeb053de3d9a", @ANYRESDEC=0x0, @ANYBLOB="0200469f8fd98e30a13101a240965a2b60e64a2b194c14af913697c252b8843671d0ba8c9f0cae4b7b7383b82fc1839f8f86a4aaa31bae9e43c50cb1de69c8c94ae1d27bd5d65e194231af9624df47f3f43b679501f6b00914d73fbcc4806c25da95bf3cff02b4213259dd052faa70e45ada85b466f40f5dcde556a76d2a75804c4c557777afbc80819966e5"]) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2200, 0x0) [ 837.966612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4430 comm=syz-executor1 03:40:24 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:24 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/246, 0xf6) [ 838.043633] binder: release 4434:4438 transaction 59 out, still active [ 838.055602] binder: undelivered TRANSACTION_COMPLETE 03:40:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') write$P9_RREADDIR(r1, &(0x7f0000000480)={0xcb, 0x29, 0x2, {0x20, [{{0x24, 0x2, 0x7}, 0x10000, 0x4, 0xd, './file0/file0'}, {{0x10, 0x1, 0x5}, 0x90, 0x80000000, 0x7, './file0'}, {{0x1, 0x1, 0x8}, 0xf3, 0x8, 0x7, './file0'}, {{0x24, 0x4, 0x2}, 0xd4, 0x2, 0x7, './file0'}, {{0x41, 0x2, 0x1}, 0x4, 0x7ff, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x5, 0x2, 0x7, './file0'}]}}, 0xcb) [ 838.102383] binder: send failed reply for transaction 59, target dead [ 838.140564] binder: release 4452:4461 transaction 61 out, still active 03:40:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400300, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000001c0)=""/246, 0xf6) [ 838.152384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4466 comm=syz-executor4 [ 838.179610] binder: undelivered TRANSACTION_COMPLETE [ 838.186757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4469 comm=syz-executor0 [ 838.191497] binder: send failed reply for transaction 61, target dead 03:40:25 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) 03:40:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) tee(r0, r1, 0x1000, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x400, 0x4, 0x1, 0xffffffffffffff9c}) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) read(r1, &(0x7f00000002c0)=""/246, 0xf6) 03:40:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="66658108800e6adca64f10e73915da3eb9643d9ced1fc1e496da7a83b946558b819aa33032389f5a04e293580c9e5cfe4611a9685fa42d658f19197ce15874960fec966c4b3dca172aa05f17255986d3779f58fa87b03cd01b87b6acc1f4945114d087801384ad61fe1d4bf2593479cd8c819e22858b5b77000c073960824dea5d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 838.748181] binder: release 4483:4486 transaction 63 out, still active [ 838.764447] binder: undelivered TRANSACTION_COMPLETE [ 838.802285] binder: send failed reply for transaction 63, target dead [ 838.842767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4501 comm=syz-executor1 03:40:25 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:25 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x8, 0x7fff, 0x9}) sendfile(r1, r0, &(0x7f0000000000), 0xb32) read(r1, &(0x7f00000001c0)=""/246, 0xf6) pread64(r0, &(0x7f00000002c0)=""/139, 0x8b, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 03:40:25 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:25 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR]) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x7, 0x1}, 'port1\x00', 0x8, 0x800, 0x8000, 0x2, 0x10000, 0x2, 0x2, 0x0, 0x3}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) r2 = getpgrp(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x3, 0x2, 0x9, 0x8, r2}) sendfile(r1, r0, &(0x7f0000000040), 0x797fffffffffff) syncfs(r0) read(r1, &(0x7f00000005c0)=""/246, 0xf6) 03:40:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) exit_group(0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:25 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0xbf, @loopback, 0x4e22, 0x4, 'wrr\x00', 0x2, 0x2, 0x72}, {@multicast1, 0x4e20, 0x10001, 0xfffffffffffffff9, 0x81, 0x5}}, 0x44) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='.\x00']) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)=0x892a) 03:40:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x10000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x800}}]}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000080)={0x4, 0x6, 0x1ff}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000140)={0x81, 0x1}) [ 838.991687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4530 comm=syz-executor2 03:40:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000001040)={0x0, 0xffffffffffffffff}) prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), &(0x7f00000002c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c72132ae6056f64653d30303030303030303030303030303030813034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_hd=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$getregs(0x11, r1, 0x1, &(0x7f0000000580)=""/233) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) [ 838.992089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4529 comm=syz-executor4 [ 839.075361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4542 comm=syz-executor0 03:40:26 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:26 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {0xffffffffffffffff, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:26 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67728d75705f69643d28dffe84610851e262e33eb7452dfe0f79d0727abc6ed0e666f45b255821ded0a4baceb366e99a0c1c39514631f089518ddb0f2d4b0a867319a9ca8c335dd48718be5c3eb6c9fdeffb9a973850c809cecb103cfacc592b7f4ec9626f01d1623e69ad8d7fee0827973d4f6660318906663434dd93d2919f2c3cd71f1032340e80000000000000003ddfa6166748c39f60157c3e8a63d495cd9ce04e1dc7ca6170c54d932bae3d27bc1a84acb3f8235847afe4447bb71cf35ffce858d1cda48a5f8f2ae2ee46173a52003dd7e6ef5db72cedbc8e10b0414ab50f988773ab08768707187ab5e5a3bb", @ANYRESDEC=r1, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) prctl$void(0x1b) 03:40:26 executing program 5: mknod$loop(&(0x7f0000000240)='./file0\x00', 0x6021, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) connect(r0, &(0x7f0000000140)=@generic={0x1, "f8428ef24460411ffb810e514d1fb859a9a86427c1f6e35b6b70f478cc659a2289947e11037c7b32d6522a292fd66de120f4d83cc16c9aab6db70f48ebf633e7ef9b140c84163cfe6093756e53641717c9207d7a5c13f35b607f6b72fb242f4ff010d1613cbab4fa01b687a0dc86e9d409ada6b783c46e9eeb3cf58e6667"}, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) mount$9p_virtio(&(0x7f0000000280)='/selinux/avc/hash_stats\x00', &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='9p\x00', 0x800000, &(0x7f00000003c0)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@fscache='fscache'}, {@cachetag={'cachetag', 0x3d, 'mime_typeem0\'$'}}, {@noextend='noextend'}, {@msize={'msize', 0x3d, 0x1ff}}, {@msize={'msize', 0x3d, 0x1}}, {@loose='loose'}, {@access_client='access=client'}]}}) accept(r0, 0x0, &(0x7f00000000c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000200)=r2) 03:40:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:26 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:26 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) 03:40:26 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="881cdbe8f705379447fe0d47120d75342c1d6278170137ed95b435c228421e4390dc7549c43636a1d966c85af4e0cdef8015298524b306f2f5fbbbc58feed03cadc916fcef3cea50d007e8315b4fbbaf1348b9f5d27387dea98bb582ffdcba89fa231736f4a9bc43177a3cd81875e25fb170554bb221671139ad521debf97fe099bd51ff867eaf4111b9c05812761c036f80665c60c68f7260beb612fc5813eaea450f874a643ca2f0caea0908f5e5528c892676da13e1e1759795396d3c961a92532beae32fa9a76d865d3e54d63fcce77bf767eb1b60bc5ee9c83e21f4911bb6a424978fa87e8b925905fff4935a58c582007851fc226c2a35df726924a827") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 03:40:26 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:26 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04009b", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendto$inet6(r1, &(0x7f0000000040)="0e3d507a40e5629551d96b3569806fe7b41f083f88f7fd7012a6b916aa1f9250cc9a9df51677b4bd0d968c70daec6c184d1981b83b1e2144b7613901390b996b2e052e317c76381e65da42989235df7848087256b10f622cafdf5e8d7b96d91f8760919ed0cbbae58c7d01fb0184e7ef6a8834e459fad283907c9326a124f2ee961204f3bc9a43e7e8ebce3e4bc6124e0e0790df795655784e21a48563f71e1ee92059702a585471ab2e82e22813c125712641dee5665e0f89e353fe", 0xbc, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x19}, 0x21}, 0x1c) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0xc4240, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @multicast1}, {0x1, @remote}, 0x20, {0x2, 0x4e20, @loopback}, 'ip6gretap0\x00'}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 839.860823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4588 comm=syz-executor1 03:40:26 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 839.864004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4584 comm=syz-executor4 03:40:26 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 839.879859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4582 comm=syz-executor3 03:40:26 executing program 7: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {0xffffffffffffffff, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:26 executing program 7: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 840.027479] 9pnet_virtio: no channels available for device (null) [ 840.030706] 9pnet: Insufficient options for proto=fd 03:40:27 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xffffffffffffffff, "1bb7670182978f0300000000000004bf764095d43a5094f4b23c1c29b51dda91d91e08a14591eacd580082f27dabdcdbeae7f5d8e8f9706468579ae10010a75b00000500"}, 0xd8) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf458, 0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000006c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000700)={@remote}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in=@dev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0x1a1e02898d991b07) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@remote, @in=@dev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000a00), &(0x7f0000000a40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) recvmsg(r1, &(0x7f00000010c0)={&(0x7f0000000c80)=@ll, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d40)=""/205, 0xcd}, {&(0x7f0000000e40)=""/242, 0xf2}, {&(0x7f0000000f40)=""/245, 0xf5}], 0x10000000000001db, &(0x7f0000001080)=""/11, 0xb}, 0x10000) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000400)) r6 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0), &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973", 0x70, 0xfffffffffffffffd) keyctl$invalidate(0x15, r6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x4) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000001100)=""/97) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) sendfile(r8, r7, &(0x7f0000000040), 0x797fffffffffff) 03:40:27 executing program 7: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:27 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:27 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:27 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f8571") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x4000, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3f}}, {@default_permissions='default_permissions'}]}}) 03:40:27 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:27 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:27 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:27 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:27 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r0}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:28 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:28 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:28 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:28 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000de583156683c2974a8df3f674dd5f21599028322e560e54fba38ff4b5ae61fd7d0112f2b15c1ef1e9672080f409a112e88eca4d5db6bb9cc85294b7e0b5eae7a199cd21bd67335fd4f286f0dd9b43e816d4cb5b8912659e3e6fe2339fc52f60aa17857d18ac073e84b38a31a8ff90154873375e86cd6"]], 0x0, 0x0, &(0x7f0000000300)}) 03:40:28 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:28 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:28 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:28 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000340), 0x797fffffffffff) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x9a13, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @local}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x101000, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xfffffffffffffeab) syz_open_procfs(r3, &(0x7f0000000100)='net/fib_triestat\x00') read(r1, &(0x7f00000001c0)=""/246, 0xf6) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x48000, 0x0) 03:40:28 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6664cc21819c226d3933d9133f3512aa8e3d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 842.388436] binder: 4709:4712 got transaction with invalid offsets ptr [ 842.425217] binder: 4709:4712 transaction failed 29201/-14, size 0-12288 line 3164 03:40:29 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) [ 842.475872] binder_alloc: binder_alloc_mmap_handler: 4709 20002000-20006000 already mapped failed -16 [ 842.493573] binder: BINDER_SET_CONTEXT_MGR already set 03:40:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d7964195930303030303030303030303030303030303034303030302c757b65725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$RTC_UIE_OFF(r1, 0x7004) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 842.493582] binder: 4709:4712 ioctl 40046207 0 returned -16 [ 842.582255] binder_alloc: 4709: binder_alloc_buf, no vma [ 842.599749] binder: undelivered TRANSACTION_ERROR: 29201 03:40:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) mount(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)="68d557dc76236426", 0x0, &(0x7f0000000240)) [ 842.628391] binder: 4709:4738 transaction failed 29189/-3, size 0-12288 line 3136 03:40:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200000, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 842.666195] binder: undelivered TRANSACTION_ERROR: 29189 [ 842.732069] binder: 4745:4747 got transaction with invalid offset (0, min 0 max 0) or object. [ 842.762946] binder: 4745:4747 transaction failed 29201/-22, size 0-8 line 3199 [ 842.799879] binder: BINDER_SET_CONTEXT_MGR already set 03:40:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x188) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0xb, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 842.825958] binder: 4745:4748 ioctl 40046207 0 returned -16 [ 842.832221] binder: undelivered TRANSACTION_ERROR: 29201 [ 842.925330] binder: 4750:4751 got transaction to context manager from process owning it [ 842.952503] binder: 4750:4751 transaction failed 29201/-22, size 0-12288 line 3004 [ 842.989832] binder_alloc: binder_alloc_mmap_handler: 4750 20002000-20006000 already mapped failed -16 [ 843.015598] binder: BINDER_SET_CONTEXT_MGR already set [ 843.015609] binder: 4750:4751 ioctl 40046207 0 returned -16 [ 843.065306] binder_alloc: 4750: binder_alloc_buf, no vma [ 843.084435] binder: 4750:4753 transaction failed 29189/-3, size 0-12288 line 3136 03:40:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000008278a0000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000db000000ff"]], 0x0, 0x0, &(0x7f0000000300)}) [ 843.084908] binder: undelivered TRANSACTION_ERROR: 29201 [ 843.130647] binder: undelivered TRANSACTION_ERROR: 29189 03:40:29 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:29 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/50) [ 843.205381] binder_alloc: 4755: binder_alloc_buf size 35184393095720 failed, no address space 03:40:29 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) [ 843.262361] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 843.288355] binder: 4755:4756 transaction failed 29201/-28, size 35367-35184393060352 line 3136 [ 843.344807] selinux_nlmsg_perm: 15 callbacks suppressed [ 843.344816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4770 comm=syz-executor0 03:40:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x0, 0x0) write$selinux_context(r2, &(0x7f0000000080)='system_u:object_r:cpu_online_t:s0\x00', 0x22) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:30 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5d, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000000000001ba7d800000000fd94c05100000000000000000000000000000000000000000000000000003000000000000025b5bd2590beb0ac4a0a4c7968a9854d77ef94c1c5ae", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000300)}) [ 843.353774] binder_alloc: binder_alloc_mmap_handler: 4755 20002000-20006000 already mapped failed -16 [ 843.353864] binder: BINDER_SET_CONTEXT_MGR already set [ 843.353872] binder: 4755:4756 ioctl 40046207 0 returned -16 [ 843.354404] binder_alloc: 4755: binder_alloc_buf, no vma [ 843.354425] binder: 4755:4774 transaction failed 29189/-3, size 35367-35184393060352 line 3136 [ 843.354726] binder: undelivered TRANSACTION_ERROR: 29189 03:40:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syncfs(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000100000000000000000000000000000000000000000000000030000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000300)}) 03:40:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = gettid() r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000280)={0x23, 0x37, 0x2, {0x3, 0x0, 0x100000000, r1, 0x5, 'fuse\x00'}}, 0x23) capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000700)={{0x87, @remote, 0x4e20, 0x3, 'lc\x00', 0x2, 0x1f, 0x26}, {@multicast1, 0x4e22, 0x2000, 0x5, 0x5, 0x9}}, 0x44) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000480)="425475838328238dfe639bd5503a4b0d67f76f206cf1593ad27ff2c61afe019f8f476011a1d9067e1dbdc4b392aa", 0x2e}, {&(0x7f0000000540)="5d8d994cdb9ff576fbb9d5de84002e4f65bd8d092e2c4f271447392994d19cba1a6de08bd8d9e7a65bca73bbcfc21efaf1377eb88f08213565b8f45cb3622e64d9a9b2cd3964b8486be4861cabb4253b4193e6cdccb9dc0f7c4eff2fcc362fa2653e2987fcd6f9d32a42ab643a5c699b61", 0x71}, {&(0x7f00000004c0)="334174fe341464449167b048d04937cbd59178fde00bf9d2cc712f6a1dfec8774f97a5b794dac72d23ba3e8a68d09105cc", 0x31}], 0x3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0xb0, r4, 0xf24, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x430e}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x34}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x30}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xe}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) getsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000780), &(0x7f00000007c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1000}}}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 843.354781] binder: undelivered TRANSACTION_ERROR: 29201 [ 843.429984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4779 comm=syz-executor4 03:40:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30300300000030303030303030303030308501db8b1bbd6904cd6a3034307365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6fdc000000000000003030302c757365725f69643d0000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,max_read=0x0000000000000000,\x00']) [ 843.474839] binder_alloc: 4782: binder_alloc_buf size 206158430208 failed, no address space [ 843.474846] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) 03:40:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) geteuid() ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000d551a819dcf1a2bb000000000000000000e9ffffff000000000000000000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000300)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000140)) [ 843.474864] binder: 4782:4790 transaction failed 29201/-28, size 0-206158430208 line 3136 03:40:30 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0xa00) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x0, 0x1, {0xad82, 0x4, 0x7f, 0x1ff}}, 0x20) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r2 = dup2(r1, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001700)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001800)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000001840)={r3, 0x1, 0x6, @broadcast}, 0x10) fremovexattr(r1, &(0x7f0000000040)=@known='security.ima\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/212, 0xd4) 03:40:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="ba5e00001fda4db8"]], 0x0, 0x0, &(0x7f0000000300)}) [ 843.483610] binder_alloc: binder_alloc_mmap_handler: 4782 20002000-20006000 already mapped failed -16 [ 843.483702] binder: BINDER_SET_CONTEXT_MGR already set [ 843.483709] binder: 4782:4790 ioctl 40046207 0 returned -16 [ 843.484283] binder_alloc: 4782: binder_alloc_buf, no vma [ 843.484303] binder: 4782:4791 transaction failed 29189/-3, size 0-206158430208 line 3136 [ 843.484609] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.484667] binder: undelivered TRANSACTION_ERROR: 29201 [ 843.547310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4802 comm=syz-executor1 [ 843.566293] binder: 4798:4803 ioctl 4b2f 8 returned -22 [ 843.566883] binder: 4798:4803 transaction failed 29189/-22, size 0-12288 line 3013 [ 843.592712] binder: 4798:4803 ioctl 4b2f 8 returned -22 [ 843.601154] binder: BINDER_SET_CONTEXT_MGR already set [ 843.601163] binder: 4798:4803 ioctl 40046207 0 returned -16 [ 843.601507] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.688789] binder_alloc: binder_alloc_mmap_handler: 4820 20002000-20006000 already mapped failed -16 [ 843.688878] binder: BINDER_SET_CONTEXT_MGR already set [ 843.688886] binder: 4820:4824 ioctl 40046207 0 returned -16 [ 843.688977] binder_alloc: 4820: binder_alloc_buf, no vma [ 843.688995] binder: 4820:4822 transaction failed 29189/-3, size 255-0 line 3136 [ 843.689413] binder: undelivered TRANSACTION_ERROR: 29189 03:40:30 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 843.689535] binder: send failed reply for transaction 81 to 4820:4822 [ 843.689666] binder: undelivered TRANSACTION_COMPLETE [ 843.689672] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.758443] binder: 4831:4832 got transaction with invalid offsets ptr [ 843.758468] binder: 4831:4832 transaction failed 29201/-14, size 0-12288 line 3164 [ 843.773109] binder_alloc: binder_alloc_mmap_handler: 4831 20002000-20006000 already mapped failed -16 [ 843.773200] binder: BINDER_SET_CONTEXT_MGR already set [ 843.773207] binder: 4831:4832 ioctl 40046207 0 returned -16 03:40:30 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="60643de3358f5d7ce4df5495ba13722f0b609aee90087c8a0bb27563f39dba66d868e60ccd7d3f895dce848766524fa44b67f72a4b5fa26e9083c3979f9b06d7b48190984cd1484e996842a257ae73d92923062a45f39fb72d0a29830b6b405d7707b6f13fbc6254e89d18925837e4cd76141e3c6ea26d", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030301030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/fuse\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:30 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0xa100, 0x0) [ 843.773377] binder_alloc: 4831: binder_alloc_buf, no vma [ 843.773394] binder: 4831:4834 transaction failed 29189/-3, size 0-12288 line 3136 [ 843.773669] binder: undelivered TRANSACTION_ERROR: 29189 [ 843.773767] binder: undelivered TRANSACTION_ERROR: 29201 [ 844.269420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4856 comm=syz-executor0 [ 844.288411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4857 comm=syz-executor4 03:40:31 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {0xffffffffffffffff, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000ca3fbfa0ff0000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x93, 0x0, &(0x7f0000000200)="c9a90e7766c7d587ba0b22d16772dd740130537d12de548a2861a0ed33ce16a5b8282508636ea1902036676887bd18b875376baced3fe73d9b51847b40715b75dd8ab9866fc77a6a33346e4acb96b962e07c07bdcd8a658c6f041cbafdce5b64002aee0e91dd89253cde94d08e33ba77ff57e60a5c1b10f43921d1fd9c09247a1726b6a5e13dff2f01e65d335be2a7ac8b5b3f"}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x100000001}}, 0x18) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f00000000c0)=""/63, &(0x7f0000000140)=0x3f) 03:40:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x84400, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x100, 0x7fff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f00000030c0), 0x115f) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000600)={0x81, 0x8, 0x6, 0x0, 0x0, [{r1, 0x0, 0x5}, {r1, 0x0, 0x3}, {r0, 0x0, 0xf6d0}, {r1, 0x0, 0xdb25}, {r2, 0x0, 0xffffffff7fffffff}, {r1, 0x0, 0xffff}]}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'bridge_slave_1\x00', 0xfff}) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r2, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4c0000, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0xa) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:31 executing program 6: stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400000, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x1, {0x1}}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) [ 844.556590] binder_alloc: 4864: binder_alloc_buf size 65448 failed, no address space [ 844.590925] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) 03:40:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r2, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1040002}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x572}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_mount_image$btrfs(&(0x7f00000003c0)='btrfs\x00', &(0x7f0000000400)='./file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000440)="b2757aef", 0x4, 0xffffffff00000000}, {&(0x7f0000000480)="a5efb9a5156fbb29a68417c1b65fd1aeadcd6359793dc04308b36e1de9beae30e48e12cd9116ef3b6628f55619a3f1e5d2dbc16dc0ce252b220104a8b85bc74e53134b9ddd31", 0x46, 0x1}, {&(0x7f0000000600)="ffa6f4b43bc586f30cc1c2642d0b607d6c586e4d1cf9b75c7be28244416c6fd2519c77d1d7cfefdb9ebcab47f1760012202106cca23ffc95ad21ca36bc2d6a0bfa0cf9a2189a9d3ca423146103aee067c21089de4504bd87c5c6a6b3be1167f366dccd0f15a5ef6cd581c40538cbb30e8d5036c3c909bb2c9e25d181bb5ce14ebda9379225aadd33ee75fd0f06fefc4fc59d4a6a978e7f6830c21ab607d4d6c87f27fd3a4df1ae50cd185a20b28f4d9291cfdf8fdb05fdcfe73c2fa31fcdefef4a1f5c409e8177b9593fd856018eac476616890d7b01760bcea83b40168c", 0xde, 0x7fffffff}], 0x200800, &(0x7f0000000580)={[{@nobarrier='nobarrier'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@treelog='treelog'}, {@datasum='datasum'}]}) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="6282b5e9", @ANYRES16=r3, @ANYBLOB="0100090000008000000002000000080004000500000008000400030000006c000100080002002c00000014000300ffffffff000000000000000000000000080008000200000008000b007369700014000300ffffffff00000000000000000000000008000800050000000800080005000000080001000a00000008000200bf000000080002003a0000000800050001000000"], 0x98}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) signalfd(r2, &(0x7f00000002c0)={0x3}, 0xfffffffffffffed8) [ 844.631754] binder: 4864:4870 transaction failed 29201/-28, size 65440-8 line 3136 [ 844.636932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4883 comm=syz-executor1 03:40:31 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x18600, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x1010c0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x5, 0x8, 0xfffffffffffffff8, 0x0, 0x5, 0x1800, 0x4, 0x1b9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x8, 0x7, 0x1, 0x4, 0x7f, 0x53, 0x3, 0x1000, 0x0, 0x4, 0x400, 0x5, 0x7, 0xffffffff, 0x8, 0x9, 0x100000001, 0x0, 0x1, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x80}, 0x100, 0x2, 0x20, 0x1, 0xa83, 0x7, 0x7fffffff}, r0, 0x8, r1, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") creat(&(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) [ 844.722271] binder_alloc: binder_alloc_mmap_handler: 4864 20002000-20006000 already mapped failed -16 [ 844.747580] binder: BINDER_SET_CONTEXT_MGR already set 03:40:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) creat(&(0x7f0000000040)='./file0/file0\x00', 0x80) 03:40:31 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x46000) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, "a95d657468312f"}, {0x20, 'max_read'}, {0x20, '$bdevppp1keyringeth1]'}, {0x20, 'user_id'}, {}, {0x20, 'user]'}, {}, {0x20, 'blksize'}], 0xa, "31a141ec2ed6c06dd0d0cf4dc233ab27770d0c6dfc7e839de06dd778ec551bcd92edf973224af51a5a0ad67d72042533ec411f35400faf636f51e663ca26e9d2f1dc8641d811b0890c8d0ff328c3f12f0f32e87a2bb8df0a28b346cf83251acae61ed55721fd0d59f31cbc74245f786d8e401a18c8e128de3559bdfda5608f7f010eee106a568c8d3d235e8f5994de61a081b0e3c1104a2c5efe3fc2d4af9b56f5faa9a5c1ac8763f848cd663c585c9af524cfa60ce45072109dd3d3f96f0e59ff8052bf"}, 0x10e) r1 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@local}, &(0x7f00000000c0)=0x14) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='.\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) [ 844.747588] binder: 4864:4870 ioctl 40046207 0 returned -16 [ 844.815096] binder_alloc: 4864: binder_alloc_buf, no vma [ 844.821102] binder: 4864:4870 transaction failed 29189/-3, size 65440-8 line 3136 03:40:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 844.919698] binder: BINDER_SET_CONTEXT_MGR already set [ 844.939424] binder: 4913:4915 ioctl 40046207 0 returned -16 [ 844.954501] binder: 4913:4920 got transaction to context manager from process owning it 03:40:31 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:31 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x18600, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x1010c0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x5, 0x8, 0xfffffffffffffff8, 0x0, 0x5, 0x1800, 0x4, 0x1b9, 0x3, 0x1, 0x2, 0x5, 0x9, 0x8, 0x7, 0x1, 0x4, 0x7f, 0x53, 0x3, 0x1000, 0x0, 0x4, 0x400, 0x5, 0x7, 0xffffffff, 0x8, 0x9, 0x100000001, 0x0, 0x1, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x80}, 0x100, 0x2, 0x20, 0x1, 0xa83, 0x7, 0x7fffffff}, r0, 0x8, r1, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") creat(&(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:31 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x0, @multicast1}, 0x10) listen(r1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) accept4$unix(r3, 0x0, &(0x7f00000000c0), 0x80800) [ 844.954514] binder: 4913:4920 transaction failed 29201/-22, size 0-12288 line 3004 [ 845.006862] binder: BINDER_SET_CONTEXT_MGR already set [ 845.039787] binder: 4913:4915 ioctl 40046207 0 returned -16 [ 845.039791] binder: BINDER_SET_CONTEXT_MGR already set [ 845.039809] binder: 4913:4924 ioctl 40046207 0 returned -16 [ 845.045622] binder: undelivered TRANSACTION_ERROR: 29201 [ 845.119766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4940 comm=syz-executor4 [ 845.124280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4941 comm=syz-executor0 03:40:31 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:31 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fcntl$getown(r0, 0x9) ptrace$pokeuser(0x6, r2, 0x7, 0xd181) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) ftruncate(r0, 0x3) r2 = socket$inet6(0xa, 0x4, 0x10001) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313030302c6d61785f726561643d3078303030303030303030303030303030301462"]) 03:40:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000885a000000000000000000000000000000000000000000000000003000000000c4b409174140e74f8ea06ae9067bcffc7c985ca7d787", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000300)}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0xffff) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4110, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0xa0, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x2}, @acquire_done={0x40106309, r3}, @transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000180)=[@fda={0x66646185, 0x7, 0x1, 0x1e}], &(0x7f0000000200)=[0x40, 0x38, 0x38]}}, @acquire_done={0x40106309, r4, 0x3}, @acquire_done={0x40106309, r5, 0x1}, @increfs_done={0x40106308, r6, 0x1}, @register_looper], 0x56, 0x0, &(0x7f0000000380)="07ec7e3419b045d3605549071a4ec1a2a8ffd7e7a7d3c362b06030bd42169c5ee675a3c656a56792e38792f7788839f634994efc04a0068ab5656678a73d04fba9cc7c2edf572b3f0f1f6d1106bb8a4008fd6e1a2d32"}) [ 845.388138] binder: 4948:4953 got transaction to context manager from process owning it [ 845.423111] binder: 4948:4953 transaction failed 29201/-22, size 0-805306368 line 3004 03:40:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x1, 0x3) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x4500, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000380)) 03:40:32 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fm=', @ANYRESHEX=r0, @ANYBLOB="ac726f61746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x8, 0xffffffffffffffe0}, 'port1\x00', 0x86, 0x0, 0x6, 0x7fffffff, 0xa077, 0x9, 0x2, 0x0, 0x1, 0x10001}) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d307830303030303030303063f63cb43030302c6d61785f726561643d3030303030302c00000000000000000000000000"]) [ 845.431764] binder_alloc: binder_alloc_mmap_handler: 4948 20ffc000-21000000 already mapped failed -16 [ 845.464912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=4962 comm=syz-executor1 03:40:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x20000, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1f) getuid() [ 845.535501] binder_alloc: binder_alloc_mmap_handler: 4948 20fff000-21000000 already mapped failed -16 [ 845.560622] binder: BINDER_SET_CONTEXT_MGR already set 03:40:32 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r2 = dup(r0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000140)) [ 845.560631] binder: 4948:4953 ioctl 40046207 0 returned -16 [ 845.625299] binder_alloc: 4948: binder_alloc_buf, no vma 03:40:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="240000000000000000000007000000000000000000bfbb829cea4635bf7fd3b5a61ea2cd578158385ec618cd0bcfd90184ce763e41dca25fbcd8a26e3b709c100c64e5d55b8dde792aab480cd5c1ee3eda17acf6b2223a9ce08fd8f27bed680b7b5aefb59209d986ca32e21989ba2a3149a88c7e0a085e0910aa401aad6f9edc0d5af13db4f0702b20d0b49816e57c95a858f4a5a29101fde983a15ac07b97cb2f57c537e72108b1243880fc5bf029ac944bbae2ada3f7bb4e06c6ba21793aea13ff60649babc16159f4ceaf2cf1", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x200) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10084, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="662c7766806e6f", @ANYRESHEX=r0, @ANYBLOB=',afid=0x0000000000007fff,fscache,access=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000300)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x800000, &(0x7f00000028c0)=ANY=[]) 03:40:32 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r2 = dup3(r0, r0, 0x80000) renameat2(r0, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x4) [ 845.644726] binder: 4948:4983 transaction failed 29189/-3, size 0-805306368 line 3136 [ 845.653410] binder: undelivered TRANSACTION_ERROR: 29201 [ 845.688591] 9pnet: Insufficient options for proto=fd [ 845.701926] 9pnet: Insufficient options for proto=fd [ 845.740439] binder: undelivered TRANSACTION_ERROR: 29189 03:40:32 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0x9, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303031303030302c757365725f69643ddc9535b52ccd8a33b2a9bc9af6e37df0ba3e76cbb673c3e449a76ba15e228a08b9752e45b1883b54fe0302a709dc95fe29a28d9904000000000000007240946b7c84bcea20648ace2af738c909992de1d8b3a5d5cbb6", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,max_read=0x0000000000000000,\x00']) 03:40:32 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x80000, 0xf1f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='veth1\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="87643d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2c003d0cd065eb2d61c395c1a25a9ba31c"]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x2, &(0x7f0000000180)=[{&(0x7f0000000240)="e4660fdb8a4fa5c877ffa674bb0d042372da609f2902396ae9fc0bbd55a7ab884b60b14d45ff6ac8b7993bc656c083be692cde6bab484e24244126f94f4768f0e947c49ca9de5cd2364e22a5943f30bda16fdcaf11fee39e4fab5262016c4cbc0e84", 0x62, 0x39}, {&(0x7f0000000480)="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", 0xfa, 0x1}], 0x800, &(0x7f0000000580)={[{@rodir='rodir'}, {@shortname_winnt='shortname=winnt'}]}) 03:40:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 03:40:32 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r2, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r2, &(0x7f0000001000), 0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@remote, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) write$FUSE_ENTRY(r2, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:32 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) socketpair(0x19, 0x6, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000280)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) 03:40:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000000, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r2, &(0x7f00000000c0)=""/79, 0xc0ec79bf96386120, 0x2, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0xffffffffffffff96) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/130, 0x82) fcntl$getflags(r2, 0x408) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x62) recvfrom$inet(r3, &(0x7f00000002c0)=""/147, 0x93, 0x10020, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c674de38adb9e01009c", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001000,max_read=0x0000000000000000,\x00']) [ 846.381884] binder: 5014:5021 transaction failed 29189/-22, size 0-12288 line 3013 03:40:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f00000030c0), 0x115f) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000380)=[&(0x7f0000000080)='rootmode', &(0x7f00000000c0)='\x00', &(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='/dev/fuse\x00', &(0x7f0000000240)='rootmode', &(0x7f0000000280)='rootmode', &(0x7f00000002c0)='\x00', &(0x7f0000000340)='/dev/fuse\x00'], &(0x7f0000000680)=[&(0x7f00000003c0)='\x00', &(0x7f0000000480)='/%systemlo,$ppp1\x00', &(0x7f00000004c0)='\\{-&/vboxnet1\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='ppp0\x00', &(0x7f0000000600)='rootmode', &(0x7f0000000640)='fd']) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 03:40:33 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='feF', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 846.393699] FAT-fs (loop7): bogus number of reserved sectors 03:40:33 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB='\x00\x00']) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 846.393705] FAT-fs (loop7): Can't find a valid FAT filesystem [ 846.457617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32788 sclass=netlink_route_socket pig=5041 comm=syz-executor0 03:40:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101100, 0x10) read$FUSE(r1, &(0x7f0000000600), 0x1000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:33 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'irlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="915fb9115b5547e81b8dd98a516c586ffb68b0302ec36d6b", 0x18}, {&(0x7f0000000180)="e7f1", 0x2}], 0x2) r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000f1e805487725cf49264b7b6c4fca9a2ea652f0040d9fbb1dcca928dae3bdd7c2e20a51e955bbe267671e5f949a05b4e1ba996b679acae39a2cfa6b6d0c6f8fdae6ce", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 846.567927] binder_alloc: binder_alloc_mmap_handler: 5014 20002000-20006000 already mapped failed -16 [ 846.577607] binder: BINDER_SET_CONTEXT_MGR already set 03:40:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x4800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) [ 846.577617] binder: 5014:5021 ioctl 40046207 0 returned -16 [ 846.655593] binder: 5014:5072 transaction failed 29189/-22, size 0-12288 line 3013 [ 846.668036] binder: undelivered TRANSACTION_ERROR: 29189 03:40:33 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7, 0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x6, 0x7, 0x58, 0x38, 0x258, 0x7fff, 0x6, 0x20, 0x2, 0x6f, 0x0, 0x81}, [{0x0, 0x1ff, 0xa24, 0x2b6, 0x7fe3, 0x1ff, 0x9, 0xcc9}], "17fc194b47d56f00b67ab7adca120a5efe8b9b6f2e951d4408d2a8870e8640c079e69abbb2b658e6fbad6d93636c319a9e80327c2754cb53bfb0fb761bc654e3ca090810bf1fd31a27aa21857ef1a72b1a6c8ab6e2991a40843daeba6697b9c23c9e0598b53987a0f8adfd9a5abf4fff5d09fca76beff8ab23db069aee3d8bae6b05f655e9fb600b241e55e49f89e79f7945b516ecfa7386b11f28715dc6a79a92e548ae64b5ec6ce8ee04d361026e065bfb1467adfdf48c", [[], [], []]}, 0x410) [ 846.715309] binder: undelivered TRANSACTION_ERROR: 29189 03:40:33 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {0xffffffffffffffff, 0x10}, {r1, 0x1000}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r11, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) 03:40:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000200)=':\x00', 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf2505000000480001001400030000000000000000000000ffffe000000208000500000000000800090060000000080004004e200000080002002e00000008000b0073697000080001000200000030000200080003000400000014000100fe8000000000000000000000000000aa08000900e594000008000800400000000800060001fcffff080006003c00000008000400278b0000240001000800060072720000080009001200000008000b0073b54ad7ee3c04f5800b437da56abaed69700008000b007369700008000500090000000800050004000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x804) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000000540)={&(0x7f0000000a40)="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", 0x1000}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101000, 0x0) getpeername$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r6 = inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x20000000) inotify_rm_watch(r2, r6) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000840)={0x0, @loopback, @multicast2}, &(0x7f0000000880)=0xc) fstat(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@delpolicy={0x64, 0x14, 0xe, 0x70bd25, 0x25dfdbff, {{@in6=@local, @in6=@loopback, 0x4e20, 0x72c, 0x4e21, 0x4, 0xa, 0x80, 0xa0, 0x1, r7, r8}, 0x6e6bb5}, [@ipv4_hthresh={0x8, 0x3, {0x10, 0x12}}, @policy_type={0xc, 0x10, {0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000005) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="001a70dad4ae383bd99463404000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000030fcffffffffffbeee4c6f01b191ab385aeb302e11a28778d8694560ac78ecb77ca49c411ddec7de518b102979bc05b2293955bf01e2eb8e9e0f7d8403e8364de448bb0ac18f0b87bb53da60938bf50f38c8d12d6151d6189b90f2d6bca78d2d5663c1f7fd1c9f4805278842d7f79d9253b8e3205a16b1015fa1bab82e41df485b890b851fd7afd11b1e8087a0551d129264313a26e1ae3e64f2282c30b86e", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000300)}) 03:40:33 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x629f152b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:33 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="a048a4919011e62c37f4af686f7e28e700c5265847fff53852aa41d5c17f9123843b6a0334e2d03f188053c04b450c1a4d46cab75d9a3129d65ac069d7b6f210c18130d7b9ca0e958d95e7daba023cc61b88a4d6", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:40:33 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:33 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) open(&(0x7f0000000140)='./file0\x00', 0x200, 0x10) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 847.261081] binder: 5100:5105 unknown command -630187520 [ 847.279000] binder: 5100:5105 ioctl c0306201 20000040 returned -22 03:40:33 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000440)=0x75) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000900)=""/40, 0xffffff6b, 0x0) futex(&(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x2) getuid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000780)=0x56) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x404000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80, 0x50) r7 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000640)='/dev/pktcdvd/control\x00', 0x12000, 0x0) ppoll(&(0x7f0000000680)=[{r0, 0x8}, {r3}, {r2, 0x204}, {r1, 0x1a}, {r3, 0x4000}, {r0, 0x10}, {r1}, {r3, 0x120}, {r7, 0x200}, {r5, 0x5000}], 0xa, &(0x7f0000000540)={0x77359400}, &(0x7f0000000700), 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x12d09556) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000a00)=""/189) r8 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x80800) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000007c0)=ANY=[@ANYRES32=r8], 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000380)={@loopback}, &(0x7f0000000400)=0x14) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0xfffffffffffffffe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000740)) sendmsg$nl_route(r10, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="40000000148009050000000000692dc5c80565f46737c3a0ac03a97d26702e316012151b09f3a10000797eed6ac69da92041c290bcce71def61180d2e6d9cd9c0bb9a6167c17295cb4a21f826082df9eb53754903a076a8b93a18eee970537e06fd42b2285108cc8cfd4e11af2d46843cb7ed0e592e0a012292e776e2c03da0582b44dd3aafffd1c9d286905c041", @ANYRES32=r12, @ANYBLOB="14000600f0ffffff09000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) 03:40:33 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='fuseblk\x00', 0x0, &(0x7f00000028c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}]}}) 03:40:33 executing program 5: r0 = socket$inet6(0xa, 0xfffffffffffc, 0x5) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") gettid() capget(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90}, 0x90) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x0, &(0x7f0000000240)) [ 847.327593] binder: BINDER_SET_CONTEXT_MGR already set [ 847.343050] binder: 5100:5105 ioctl 40046207 0 returned -16 INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes [ 1002.656728] INFO: task syz-executor2:5056 blocked for more than 140 seconds. [ 1002.663948] Not tainted 4.9.117-g8b21e85 #19 [ 1002.669736] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.677701] syz-executor2 D28936 5056 25634 0x00000004 [ 1002.683444] ffff880199cbb000 ffff8801aae75500 ffff8801ccad2a00 ffff88019a3c8000 [ 1002.691546] ffff8801db221c18 ffff8801cd5ff7b0 ffffffff839ebd0d ffffffff81235687 [ 1002.699642] 0000000000000000 ffff880199cbb8c0 0000000600000007 ffff8801db2224e8 [ 1002.707735] Call Trace: [ 1002.710318] [] ? __schedule+0x64d/0x1bd0 [ 1002.716015] [] ? mark_held_locks+0xc7/0x130 [ 1002.722100] [] ? rwsem_down_read_failed+0x1df/0x320 [ 1002.728823] [] schedule+0x7f/0x1b0 [ 1002.734003] [] rwsem_down_read_failed+0x1e4/0x320 [ 1002.740606] [] ? rt_mutex_futex_unlock+0x10/0x10 [ 1002.747075] [] ? dput.part.29+0x2a/0x7b0 [ 1002.752775] [] ? dput.part.29+0x16d/0x7b0 [ 1002.758809] [] ? dput.part.29+0x2a/0x7b0 [ 1002.764514] [] call_rwsem_down_read_failed+0x18/0x30 [ 1002.771332] [] down_read+0x52/0xb0 [ 1002.776575] [] ? path_openat+0x17dc/0x3590 [ 1002.782449] [] path_openat+0x17dc/0x3590 [ 1002.788239] [] ? depot_save_stack+0x132/0x460 [ 1002.794373] [] ? path_lookupat.isra.41+0x410/0x410 [ 1002.801016] [] ? kasan_kmalloc+0xc7/0xe0 [ 1002.806787] [] ? __kmalloc_track_caller+0xdc/0x2b0 [ 1002.813350] [] ? kmemdup+0x24/0x50 [ 1002.818599] [] ? selinux_cred_prepare+0x43/0xa0 [ 1002.824905] [] ? security_prepare_creds+0x83/0xc0 [ 1002.831462] [] ? prepare_creds+0x222/0x2a0 [ 1002.837400] [] ? prepare_exec_creds+0x11/0xf0 [ 1002.843530] [] ? prepare_bprm_creds+0x67/0x110 [ 1002.849820] [] ? SyS_execve+0x42/0x50 [ 1002.855256] [] ? do_syscall_64+0x1a6/0x490 [ 1002.861203] [] ? entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1002.868548] [] ? save_stack_trace+0x16/0x20 [ 1002.874504] [] ? kasan_kmalloc+0xc7/0xe0 [ 1002.880273] [] ? kasan_slab_alloc+0x12/0x20 [ 1002.886230] [] ? kmem_cache_alloc+0xbe/0x290 [ 1002.892345] [] ? prepare_creds+0x28/0x2a0 [ 1002.898203] [] ? prepare_exec_creds+0x11/0xf0 [ 1002.904333] [] ? prepare_bprm_creds+0x67/0x110 [ 1002.910621] [] ? do_execveat_common.isra.40+0x2d4/0x1f30 [ 1002.917779] [] ? SyS_execve+0x42/0x50 [ 1002.923217] [] ? do_syscall_64+0x1a6/0x490 [ 1002.929157] [] ? entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1002.936250] [] ? debug_check_no_locks_freed+0x210/0x210 [ 1002.943324] [] ? save_stack_trace+0x16/0x20 [ 1002.949344] [] do_filp_open+0x197/0x270 [ 1002.954954] [] ? may_open_dev+0xe0/0xe0 [ 1002.960634] [] ? __lock_acquire+0x654/0x4070 [ 1002.966740] [] ? debug_check_no_locks_freed+0x210/0x210 [ 1002.973742] [] do_open_execat+0x10f/0x640 [ 1002.979770] [] ? setup_arg_pages+0x7b0/0x7b0 [ 1002.985814] [] do_execveat_common.isra.40+0x68f/0x1f30 [ 1002.992797] [] ? do_execveat_common.isra.40+0x3d7/0x1f30 [ 1002.999949] [] ? prepare_bprm_creds+0x110/0x110 [ 1003.006252] [] ? getname_flags+0x23a/0x580 [ 1003.012208] [] SyS_execve+0x42/0x50 [ 1003.017544] [] ? setup_new_exec+0x830/0x830 [ 1003.023500] [] do_syscall_64+0x1a6/0x490 [ 1003.029277] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1003.036186] [ 1003.036186] Showing all locks held in the system: [ 1003.042575] 2 locks held by khungtaskd/519: [ 1003.046899] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 1003.055626] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 1003.065326] 2 locks held by getty/3659: [ 1003.069294] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 1003.078654] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 1003.088675] 2 locks held by syz-executor2/5056: [ 1003.093322] #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x53/0x110 [ 1003.103613] #1: (&type->i_mutex_dir_key#4){++++++}, at: [] path_openat+0x17dc/0x3590 [ 1003.113851] [ 1003.115460] ============================================= [ 1003.115460] [ 1003.122787] NMI backtrace for cpu 1 [ 1003.126402] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.117-g8b21e85 #19 [ 1003.133658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.142992] ffff8801d849fd08 ffffffff81eb4be9 0000000000000000 0000000000000001 [ 1003.151018] 0000000000000001 0000000000000001 ffffffff810b9bd0 ffff8801d849fd40 [ 1003.159039] ffffffff81ebfee7 0000000000000001 0000000000000000 0000000000000003 [ 1003.167060] Call Trace: [ 1003.169632] [] dump_stack+0xc1/0x128 [ 1003.174978] [] ? irq_force_complete_move+0x320/0x320 [ 1003.181712] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 1003.188188] [] ? irq_force_complete_move+0x320/0x320 [ 1003.194921] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 1003.202000] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1003.208994] [] watchdog+0x6b4/0xa20 [ 1003.214251] [] ? watchdog+0x11c/0xa20 [ 1003.219682] [] kthread+0x26d/0x300 [ 1003.224857] [] ? reset_hung_task_detector+0x20/0x20 [ 1003.231505] [] ? kthread_park+0xa0/0xa0 [ 1003.237114] [] ? kthread_park+0xa0/0xa0 [ 1003.242716] [] ? kthread_park+0xa0/0xa0 [ 1003.248335] [] ret_from_fork+0x5c/0x70 [ 1003.253998] Sending NMI from CPU 1 to CPUs 0: [ 1003.258906] NMI backtrace for cpu 0 [ 1003.262520] CPU: 0 PID: 5048 Comm: syz-executor2 Not tainted 4.9.117-g8b21e85 #19 [ 1003.270110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.279435] task: ffff88019f2c9800 task.stack: ffff8801d3ac8000 [ 1003.285463] RIP: 0010:[] c [] __lock_acquire+0x3b7/0x4070 [ 1003.294179] RSP: 0018:ffff8801d3acf6d0 EFLAGS: 00000803 [ 1003.299599] RAX: 0000000000000000 RBX: ffff88019f2ca118 RCX: 0000000000000000 [ 1003.306863] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88019f2ca094 [ 1003.314105] RBP: ffff8801d3acf878 R08: 0000000000000001 R09: 0000000000000001 [ 1003.321347] R10: ffff88019f2c9800 R11: 1ffff10033e59422 R12: 00000000000004eb [ 1003.328589] R13: 0000000000000002 R14: ffff88019f2ca0b4 R15: 0000000000000000 [ 1003.335832] FS: 00007fa299ee9700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 1003.344050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1003.349903] CR2: 00000000017ea000 CR3: 00000001c338a000 CR4: 00000000001606f0 [ 1003.357146] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1003.364390] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1003.371632] Stack: [ 1003.373753] 0000000000000001c ffff88019f2ca0c8c ffffed0033e59418c ffff88019f2c9800c [ 1003.381949] dffffc0000000000c ffff8801d3acf748c ffffffff81235687c 0000000000000000c [ 1003.390147] ffff88019f2ca0c0c 0000000600000007c ffffffff8560dae0c ffffffff839fc857c [ 1003.398342] Call Trace: [ 1003.400895] [] ? mark_held_locks+0xc7/0x130 [ 1003.406836] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 1003.413123] [] ? debug_check_no_locks_freed+0x210/0x210 [ 1003.420104] [] ? finish_task_switch+0x1ed/0x640 [ 1003.426390] [] ? finish_task_switch+0x1c1/0x640 [ 1003.432677] [] ? __schedule+0x61f/0x1bd0 [ 1003.438354] [] ? __schedule+0x655/0x1bd0 [ 1003.444034] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1003.450581] [] lock_acquire+0x130/0x3e0 [ 1003.456175] [] ? prepare_to_wait_event+0x6b/0x450 [ 1003.462636] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 1003.469534] [] _raw_spin_lock_irqsave+0x4e/0x62 [ 1003.475821] [] ? prepare_to_wait_event+0x6b/0x450 [ 1003.482282] [] prepare_to_wait_event+0x6b/0x450 [ 1003.488569] [] ? wake_up_atomic_t+0x30/0x30 [ 1003.494511] [] ? __might_sleep+0x95/0x1a0 [ 1003.500277] [] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 1003.506911] [] request_wait_answer+0x22e/0x6e0 [ 1003.513111] [] ? flush_bg_queue+0x2b0/0x2b0 [ 1003.519051] [] ? prepare_to_wait_event+0x450/0x450 [ 1003.525611] [] ? __fuse_request_send+0xfe/0x1b0 [ 1003.531898] [] __fuse_request_send+0x109/0x1b0 [ 1003.538099] [] fuse_request_send+0x5d/0x70 [ 1003.543951] [] fuse_simple_request+0x2f4/0x660 [ 1003.550151] [] create_new_entry.constprop.31+0x1a2/0x490 [ 1003.557218] [] ? fuse_permission+0x480/0x480 [ 1003.563245] [] ? selinux_determine_inode_label+0x171/0x310 [ 1003.570487] [] fuse_mkdir+0x21e/0x2c0 [ 1003.575906] [] ? fuse_symlink+0x210/0x210 [ 1003.581676] [] ? selinux_inode_mkdir+0x22/0x30 [ 1003.587877] [] ? security_inode_mkdir+0xd6/0x110 [ 1003.594249] [] vfs_mkdir2+0x3c9/0x630 [ 1003.599670] [] SyS_mkdirat+0x213/0x260 [ 1003.605176] [] ? SyS_mknod+0x420/0x420 [ 1003.610681] [] ? do_syscall_64+0x48/0x490 [ 1003.616447] [] ? SyS_mknod+0x420/0x420 [ 1003.621952] [] do_syscall_64+0x1a6/0x490 [ 1003.627632] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1003.634532] Code: c82 c94 c08 c00 c00 c4d c8d cb2 cb4 c08 c00 c00 cba c02 c00 c00 c00 c4c c89 cf6 c85 cc0 c0f c45 cc2 c48 cc1 cee c03 c48 cba c00 c00 c00 c00 c00 cfc cff cdf c0f cb6 c34 c16 c<4c> c89 cf2 c83 ce2 c07 c83 cc2 c03 c40 c38 cf2 c7c c09 c40 c84 cf6 c0f c85 c3f c11 c [ 1003.665718] Kernel panic - not syncing: hung_task: blocked tasks [ 1003.671866] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.117-g8b21e85 #19 [ 1003.679117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.688455] ffff8801d849fcc8 ffffffff81eb4be9 ffffffff83c8bc20 00000000ffffffff [ 1003.696467] 0000000000000000 0000000000000001 dffffc0000000000 ffff8801d849fd88 [ 1003.704489] ffffffff81421c85 0000000041b58ab3 ffffffff843bc020 ffffffff81421ac6 [ 1003.712497] Call Trace: [ 1003.715071] [] dump_stack+0xc1/0x128 [ 1003.720417] [] panic+0x1bf/0x3bc [ 1003.725415] [] ? add_taint.cold.6+0x16/0x16 [ 1003.731369] [] ? ___preempt_schedule+0x16/0x18 [ 1003.737585] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 1003.744840] [] watchdog+0x6c5/0xa20 [ 1003.750096] [] ? watchdog+0x11c/0xa20 [ 1003.755529] [] kthread+0x26d/0x300 [ 1003.760703] [] ? reset_hung_task_detector+0x20/0x20 [ 1003.767353] [] ? kthread_park+0xa0/0xa0 [ 1003.772960] [] ? kthread_park+0xa0/0xa0 [ 1003.778564] [] ? kthread_park+0xa0/0xa0 [ 1003.784195] [] ret_from_fork+0x5c/0x70 [ 1003.790158] Dumping ftrace buffer: [ 1003.793814] (ftrace buffer empty) [ 1003.797496] Kernel Offset: disabled [ 1003.801102] Rebooting in 86400 seconds..