28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x1000000000000348, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0xffffffffffffffff)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:23 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:23 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

[  423.038344] audit: type=1400 audit(1540367903.499:73): avc:  denied  { associate } for  pid=18752 comm="syz-executor0" name="event0" dev="devtmpfs" ino=1073 scontext=system_u:object_r:iptables_initrc_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
07:58:23 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:23 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/111, 0x6f}], 0x1, &(0x7f00000001c0)=""/155, 0x9b, 0x38000000000000}, 0x20)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000002c0)=@generic={0x1, 0x100, 0x8001})

07:58:23 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:23 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:23 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r5 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
shutdown(r4, 0x1)
sendto$inet6(r5, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:23 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90", 0x60, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:24 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:24 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:24 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x400000000000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080)=0x1)
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:24 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e92", 0x90, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:24 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:24 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x4000, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x1}], 0x23c)
fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c, 0x2)

07:58:24 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:26 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100000001, 0x2)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x4)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x80000000, 0x8, 0x0, 0x3, 0x8, 0x7, 0x1, 0x9, 0xa2, 0x6})
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:58:26 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x4000, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x1}], 0x23c)
fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c, 0x2)

07:58:26 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e92", 0x90, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:26 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:26 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:26 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000000540))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:26 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x4000, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x1}], 0x23c)
fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c, 0x2)

07:58:26 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

07:58:26 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e92", 0x90, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 1:
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:27 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eec", 0xa8, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 1:
rt_sigprocmask(0x0, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:27 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:28 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

07:58:30 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f00000004c0)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe8c)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:30 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eec", 0xa8, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b758", 0xb4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:30 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:32 executing program 0:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x200402, 0x0)
ioctl$KDADDIO(r0, 0x4b34, 0x1)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xb3)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0))
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x5, 0x3}], 0x18)

07:58:32 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:32 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b758", 0xb4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:32 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:32 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:32 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b758", 0xb4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b758", 0xb4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 0:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
close(r0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x10080, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xb3)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x8)
write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:58:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b758", 0xb4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50", 0xba, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x10000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000480)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae0", 0xbd, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:33 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYPTR64], 0xaf)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f00000004c0))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x8, 0x402800)
r1 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb)
request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='/dev/input/event#\x00', r1)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

07:58:36 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae0", 0xbd, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0xffffffea)
r8 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xbb40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9)

07:58:36 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1b, 0x101004)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
getpgid(r1)
ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:58:36 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080))
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x169)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x18)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth0\x00')

07:58:36 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae08464", 0xbf, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:36 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0)

07:58:37 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:37 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:37 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae08464", 0xbf, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:37 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f00000004c0)={0x26d, 0x0, &(0x7f0000000500)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:37 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:37 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:38 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae08464", 0xbf, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:38 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:38 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:38 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:38 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:40 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xffffffff)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1, 0x10000000000}], 0x18)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x6}, 0x28, 0x0)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=""/215, 0xd7)
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4)
sync_file_range(r1, 0x0, 0x9, 0x2)

07:58:40 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff0000000000000000feffff4d041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef55f0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829eca6f4f8a0299d92977576b888607aa7d2d70d83f33dc6f68a5e0b9c397f34fc3f4398501e349e810b1ec488d03af87b0172d15831493d37d52a8c5fae8d70e72b9d26b335bd41f17480634c056fc9d8103569d02e7a9bea0b77303c5c15942099a8c9bf4e9ef7a646efcd5797000000000000000000000000000000a1fe69fce438201699e2e55585a6199917c17dc0e2ffa432b84f9ab3948ac8443cc56ccc4ef866aa62b32f643d5f2c3d55bfc5b0986228d58f64d56dd26680c6b9d36e96dd2be19e239d92acb7bd3ba1670f19de0b206be8480756a8099519213278849d"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:40 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:40 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:40 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:40 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:40 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:58:40 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:40 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:41 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480))
ptrace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, <r6=>0x0})
ptrace$setopts(0x4206, r6, 0x0, 0x0)
ptrace(0x4207, r6)
syz_open_procfs(r6, &(0x7f0000000100)='net/sockstat6\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x8001})
clone(0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ptrace$setregset(0x4209, r6, 0x20000004, &(0x7f0000000040)={&(0x7f0000000040)})
ptrace$getsig(0x4202, 0x0, 0x9, &(0x7f00000001c0))
fgetxattr(r5, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f00000004c0)=""/155, 0x9b)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)

07:58:41 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:41 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:41 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:41 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:41 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x101000, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r3, 0x30, 0x8000, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000340)={0xffffffffffffffc8, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:42 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:42 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:42 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x90)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x100004c1)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0)

07:58:44 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/checkreqprot\x00', 0x801, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000140)=0x18c)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:44 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:44 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})

07:58:45 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/66)

07:58:47 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040), 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xfffffffffffffea3)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:47 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:47 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x80000000d)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:48 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00'})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 0:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:58:50 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x0, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:50 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:50 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:51 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYRESDEC=0x0], 0x2bb)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:53 executing program 0:
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x6, {{0xa, 0x4e23, 0x1000, @loopback, 0x81}}, {{0xa, 0x4e21, 0x4000000, @dev={0xfe, 0x80, [], 0x11}, 0x3}}}, 0x108)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
rt_sigtimedwait(&(0x7f0000000080)={0x8a}, &(0x7f00000000c0), &(0x7f0000000280), 0x8)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xb3)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000002c0))
write$evdev(r2, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
fcntl$setsig(r2, 0xa, 0x39)

07:58:53 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e21000000000300020000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r1, 0x3, 0x5e8c, 0x201)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:53 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:53 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:54 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:54 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x0, 0x6, 0x8000000000007c)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000004c0), &(0x7f0000000500)=0x370)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:56 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
getitimer(0x2, &(0x7f0000000040))
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:58:56 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x0, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000300)={0x34, 0x0, &(0x7f0000000480)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:56 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa00000800"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x0, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:56 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:57 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0x7, 0x0, &(0x7f00000004c0))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000300))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:58 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
r1 = dup2(r0, r0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

07:58:58 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa00000800"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:58:58 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:58:58 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa00000800"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:00 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
pipe(&(0x7f0000000040))
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:00 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fd8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a64ad324b73f826e654037df501d86094d846f2406bd37b4b6e694b6aa9f4504978ee2a1c72e476dc1daed604b9ef15128b7f24320910581c505a9b20d8d7cea82bf441549e4c3e0aa3aaf6f482"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:00 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:00 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:00 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:00 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:01 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

[  460.611518] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
07:59:01 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa00000800990000000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:01 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x10000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:01 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:01 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:01 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000300))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, "6e723000fffffffffffffff700"})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000004c0)=0x4)
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:02 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x103000, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:02 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(0xffffffffffffffff, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:02 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa00000800990000000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:02 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:02 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:02 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
write$binfmt_elf64(r5, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0x68f7, 0x0, 0x0, 0x4, 0x2, 0x6, 0x1, 0x160, 0x40, 0x23a, 0x4, 0x8be, 0x38, 0x1, 0x800, 0x8, 0x5}, [{0x7, 0x7, 0x6, 0x55, 0x40, 0x8, 0x7ff, 0x2}, {0x0, 0x8, 0x80, 0xffffffff, 0xffffffff, 0x4, 0x4, 0x1}], "c2b5876188809c0b2df33b0760d4ddcca81b5e04b5d690341d518a26794d894d310ffa3545cb9a6263bed2202308bcd997c733c0eb94619150459fe0d8c019b9d923a2457bdab02223ea6c5f0fdcfa3d063d373829da43e832e978b259ab86dabf1165bd89db1d932232ad6f668b00c9d33613f24c20432ce59492b3d20dc458c3bfbe52abb61c11eadcd7f512400be06e5b604440ae19fb87ab28e1157344866361b5d86f09042e20651fd68e55558fd1e7a135e1fe3428632c490716c89b133fe19d19c9a20e3513ddc0ac4d07054503eb24d1066a6f3103c234e3bd775946a89cc72c0ce7dd15f6c6d879358f9a8e9eb6c8b29781b74ac393f206", [[], []]}, 0x3ac)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r5, 0xa, 0x3e)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:02 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:03 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:03 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:03 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:03 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x0, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:03 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:04 executing program 0:
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0xfffffffffffffffe)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:04 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:04 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:04 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:04 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:04 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:04 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/98)
r1 = getpgid(0x0)
ptrace$poke(0x4, r1, &(0x7f0000000140), 0x3)

07:59:04 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:05 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}}, 0x0)

07:59:05 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:05 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:05 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:05 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000003)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff3b)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae98)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x5, 0xf7fffffffffffffb, 0x400fff9)
unshare(0x2040000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x2, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}}, 0x88)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:05 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, <r1=>0x0})
prlimit64(r1, 0xf, 0x0, &(0x7f0000000240))
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r3, 0x48, 0x0, 0xae95)
write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r3, 0x3, 0x8000, 0x8001)
fallocate(r3, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r6, 0x127e, &(0x7f0000000300))
getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r6, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:05 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:05 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:05 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}}, 0x0)

07:59:06 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x8000000000002)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:08 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae08464", 0xbf, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0], 0x7d)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:08 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140), 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae08464", 0xbf, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:08 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:10 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=<r2=>0x0)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r2)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40)

07:59:10 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:10 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0x0)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xfffffffffffffeb5)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000003c0)={{0x2, 0x80004e22, @local}, {0x306, @local}, 0x28, {0x2, 0x4e24, @rand_addr=0x2}, 'ip6tnl0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffffffffdfd)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000700)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:10 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:10 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)

07:59:10 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:10 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
removexattr(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)=@random={'btrfs.', 'system.sockprotoname\x00'})
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x2, 0x2c}, 0x198)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa00000800990000000000030001000000000002007465616d5f736c6176655f3100000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:11 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0abf16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@generic={0x3, 0xffffffffffffffff, 0xff})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
umount2(&(0x7f0000000440)='./file0\x00', 0x2)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:11 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r5 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
shutdown(r4, 0x1)
sendto$inet6(r5, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:11 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)

07:59:11 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:11 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x0, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:13 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7c20, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000200)={0x1f, 0x3b, &(0x7f00000001c0)="5b2b491acd619b10920629cde85b1d95f9e3dbfe4a8a30e58acae0dd3d35e2f61db6c10e3f5f975c30f91dadc47a0bd3490ef159b8d7ceef32a031"})
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f0000000140)={r1, r2+10000000}, &(0x7f0000000180))
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/93)

07:59:13 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES64=r3], @ANYRESDEC=r3], 0x1c)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xfb9c)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:13 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r5 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
shutdown(r4, 0x1)
sendto$inet6(r5, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:13 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)

07:59:13 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:13 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x3, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329cd54a47ceba970aea715c2c365c9937da1acb4055d611a75e9d89eb85b"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x3ff, 0x1, 0x10000, 0xffffffff, 0x800}, 0xc)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r5, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
shutdown(r7, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20003c}, 0x1d4, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:13 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x50, &(0x7f0000000440)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)=r8, 0x4)

07:59:13 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:13 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/99, 0x63}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:14 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/mls\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000001680)="cc3c3d0da88dd947aa73717e3c0dc6c16147e6d7a3f536145cb548ba2d8b6babad2f874507528e865877325f8650939c303d5e0f16a94aaf7194b6026fead30ea4ba6f545fa524ee369e87f4447d3d2c44fe268e903a065d95c6379e013adf5cff7c209491059fff992f310442673d35f0fb4d3c68fd2c2b877262da91c0dabf52a41fceff5abac396ae0e0d17fc73bcb5c2f31a32ce040977b1b0c9b09e73748227ae67ae9654665c9dfe9d9e706e3782d7ec932d3a6a99d38b51cc07f51f24dc986a8e4f85cad2ed9c", 0xca}], 0x1, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200), 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af)
getrandom(&(0x7f00000014c0)=""/167, 0xa7, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240))
unshare(0x0)
recvmsg(r1, &(0x7f0000000f80)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14, 0x1}, 0x100)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000002f40)={0xa, 0xffff, 0xffffffffffff5107})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$KDDELIO(r2, 0x4b35, 0x1)
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000022c0)=""/230)
stat(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$msdos(&(0x7f00000013c0)='msdos\x00', &(0x7f0000001440)='./file0\x00', 0xffffffffffffff01, 0x1, &(0x7f0000002ac0)=[{&(0x7f0000002a40), 0x0, 0x3f}], 0x102008, &(0x7f0000002d80)={[{@fat=@uid={'uid'}}, {@fat=@errors_remount='errors=remount-ro'}, {@fat=@quiet='quiet'}, {@fat=@uid={'uid', 0x3d, r3}}, {@fat=@nfs='nfs'}, {@dots='dots'}]})
read$eventfd(r2, &(0x7f0000000fc0), 0x8)
write$binfmt_elf64(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x3af)
sendmmsg(r1, &(0x7f0000002240)=[{{&(0x7f0000001580)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x7, 0x76e, "31d59090d944cfaed0471f40f43734c3d3779e88b465046589350fd4652ea12772d1aaec485da9edfbdff027295a6cdb633e9373b4170a2fe5d5f8ebe7acf5", 0x13}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001600)="fcc579116ab770e00095b8b5a4a42d7f9d5fb1bd124b975bf548ab24ea5964c879f0f1fd20f4c8202e3d4076bd946490f45004534a22adc04f6f9a4034c65aaa798c3b0395d227601ac59657d19b3b480a8004546b0bb5dafbcc2adb3a099275", 0x60}, {&(0x7f0000000180)="cc77d82b035c", 0x6}, {&(0x7f0000001480)="e1c0b3cb70fecff2e19e6f68fe3508dd4429e31229a61711d2c5738da6c8add2357ce6ff216c0990c1714b35b18452d80dbff022400e7b", 0x37}, {&(0x7f0000001780)="7b5e7783c57bc457f817e20c93939a3d24225389354c32871075252abefd3d7dfb8782ea02d56667802202ad6e2c5b061940a8593c42f27b03d4e907532d5e7735e8c53b0f3a3ed57b20121939aca9c4b4c48c00043235c39100c6327bfbcab48cb338", 0x63}, {&(0x7f0000001800)="d605d4ccd003406bcc1fd2a7f1d267bdda8fdc8b11c203ddaa46792c4f1d118d1c88868bdd98e707fccf414133a1bb1cb295c3434b0cbab683cfa49a8dbb0378a30e05f4ae9ceb8db9be000ea9ce0e16820b26b5ff6cd9d5466c546552469e5ad91d968325a5065a4a2e26b46ce4f0937e12de0b6fe3072679154d1bb9586efbcffcb08d138719d87a9b3e9cc6e4fc8655f1ff7a64f85a169a4aecb94e90cc8191eb30bc308527dfe16a244bfbcf13e5a62c25334bdc865ed69c3136d04b757eb80685e028d7d7c31ab389d469ff86459ac2d38c5ee0ac404ef74a4472987da58b7e843b37671ea173", 0xe9}, {&(0x7f0000001900)="01a4b4337944fd474b29", 0xa}, {&(0x7f0000001940)="73497396199a6db336949cf4ba525852fc891c4412aa0f98a64cf30cc43b742ea096702fa5376b2364c5ec5f77f0a4041d172419977bbb7b186877b307f253e35f0ed4b5e7b9c54b986abb2f33b8b0b9ad993b67d8c3ef7fa66f01ba28ad5645299e01a36183b2bab08ac314b129ec21dec849adfd6b88b43de6107417a2264f124e54f2ad5bae28e3a3d25b7337514826d59d8a5499a3c22aa6291a4e8bafaba2fb59625c3bce22913909fb684dc5225024e786786b068a2461fcca37519fb80d6d80969206f5a659f795311acf67fc45052f6bd928b9a89b19ae873fe8aa888e412f9c17d1bcc180", 0xe9}, {&(0x7f0000001a40)="67706eb2992cfcc9c4708b657ca1c44ab31b6704ee793d8ec61f788b715ce053debd85980e959cfccc65cdf5c4abbac6b2b88fd54d830c0746e7107718c84ea07bf1967b48e03fca6ce82ae72639aff4b2a44f1b3a06dd5f29d2ba90f6397a90ecb39c1897249ad5b919ee89dd9831eeab2f83644560d2a2a7c199f554723f05fa937a7518d18fd30b1f5e42973b9c85178ed4339b0b1867bf8b88113bc9c3a85c1e9ff6905482f6adc90e43eb26eede162aba21edc162598ecc3db2c81e55c606dc446dabb0a4277073beda48463975d53e943276b5762d24d3442421a886a1d0919bcddec1da6587258407846567793941487c4a61be88", 0xf8}, {&(0x7f0000001b40)="b658292c36a1176346c62b0713999e27adc1fb26ed527e0bb89e537b8c954602769638d24a7292fdd1283a750ca1acc5a5b0a5a8bcd93d9322c94466e8714a1dd37aa5d3919e76d2435f21ed0b8d8c82d34aa4272f4dbc408ec68c52d7471174a96b6270171254176be2440782135d4cff8e3d84a47c479d10610abbb46f27cd251d798cec40038180ee62a4e44db6593f41477f04406fc21a0c8801350b7642c307849b1376bc92f14bbf24b0e37a06a179b37cca9baf02fe04640969af7215a6aea7552297c6e367bb29283b1c7e4ce321c9d87e745c216d0bac5406ab232e6e640c5bea9fc26072fac0637498ac87820b311c9d44f7e0", 0xf8}], 0x9, 0x0, 0x0, 0x80}}, {{&(0x7f0000001d00)=@pppoe={0x18, 0x0, {0x0, @dev={[], 0xc}, 'bridge0\x00'}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="4f68c0b8e6caf68f3b18a15cdd85d9f4f79cd126d79203099b114a0a3fa9d0081396521f9d46d7c28b4139d927f9b03f112bf2b8ec292d137a49fe60848ebe04dd4a4e02953f9d8ea0bc6ed9bac2561748d277f04a30ad23327a5906e520d3cea28ce8", 0x63}, {&(0x7f0000001e00)="91636202dfaba6fe0787193c1c92d0d7403fa4d0d8cf03fa69ebcc5d2e720790e8faf6d7eb0bfa4c536d1e355e69fcb6794eb8c6d8ccf7281e4e829d0bfddaf343697e38c89a229f3ac3839efbf23fdf9600511b2b28c88ecbcffcb573a05561cfd312eed2393e9b7f5f250a65c6", 0x6e}, {&(0x7f0000001e80)="737873f5fb7d132722ff21bec24bceda78bce3ed70039e2a6150ce793a8d9935d7056aad7730b5407adf5f315f41b3484a5705be6eb6e647fed60d4209ff1f40cccecf4b171154b3fec73cc1f2ce5d33d39b37df29cc190e572e979ed78404bf1104d4be833ae6828a140ae24ae21960ce2bdd8fc58b8ba258a204f70ffebb2df00dab740c2d364eeb5e4a490d291d7a1f", 0x91}, {&(0x7f0000001f40)="82405a2d747b68319963032b6aa0f624a9f00ce679d137109737a468deb6761338f1f106f7774e3178172ebf36b73665b1984d239b7f92dfc9cb6ccd8ba2d031ba11ffab32abce9d993a5f", 0x4b}], 0x4, &(0x7f0000002000)=[{0x30, 0x116, 0x7, "6ccccbd703d39b198b6c72188656f4b5e8d4661043d509dfc2"}, {0xb8, 0x13e, 0x1, "c30b9d06c23775c8997528bee1f2d50d08d9d4657527e2e3bbcd9de8d269a058f05df82b4352291a31bca77973c91a0aedf221057ca7155b0adf8e2e4146d775c84cab4ebecc23ebfa77cb7be6fb5c80a0ce8c7cff492e45e06f9c8d43106b26f9a509ac2c3fcd2593211fede3d1e519eff2c063bddedaf54b6808ae075292062a46882f7020a02c261630003b8b2b1063400bce87cfe03ac6b7acdacf4ba3a04cf8"}, {0xd8, 0x18f, 0x1, "aff6e341c651c6b7b4bd5ff225102073ee656c6ef6822afa78900006fcd617dae4ce4dbe948df808cbc2fac290c7ee28ac656de707e394f0ac0b70a7dca29f13f4573f76b4c9fc46d0cf5de72ee0042b16acefc134d0c923c394cccf07d85d69d9f046a9a8039c2bb93118aef159049210d08c78d058b40778e30de8c9119af76c28ed126ccc98b4f8ee43ab7ab3b2659a6912fd86cb27a8a7ce83538329be59ff97c86d69110a9bfd63b65ab9ece99a87e2f19d05b68ce3641ce5da4a0473c6aca1d8043a0b"}, {0x68, 0x11f, 0x824f, "c619a64505f18349213f7dd3ffc14d0f2907a4396891d8aaa50cd39f4bca8b6a5e0a32262b6002870fd2162133e3c0b77b6223690899e838d54f82e4a4cb0b67323d56c2dac3b6b704ac4775984630527e1772"}], 0x228, 0x880}, 0x3f}], 0x2, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc5b)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000002c00)={'IDLETIMER\x00'}, &(0x7f0000002c40)=0x1e)

07:59:14 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e029c2c365c9937da1acb4055d9eb85bf527e72d3e6041000000"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:14 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:14 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/67)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80000)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x772, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @loopback}, 0x280, 0x6, 0x8, 0x4, 0x7f, 0x0, 0x80000000, 0x7f, 0x6})
socketpair(0x3, 0x7, 0x401, &(0x7f00000001c0))

07:59:14 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/99, 0x63}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:14 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:14 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x7f, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:15 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:15 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:15 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003000000220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ecc2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d03392a5d179ef3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b888607a"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'veth0_to_bond\x00'})
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r0, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:15 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e09eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9c000000360004002dbd7000ffdbdf251a000000d33895417244f9718d60a51466b75abd2ac29d5d90c5b3b8d5c4f0abe80a3ebea7a07a57042d00f43c54faedf8f13722d8ebe1456a51ca624ab711d24dff6f3722a77b48c50d0386496b849d06e9b8221f4de03bb7a7b003e4cb7a11b80b006a978357a43d2ba2a97122b2a85681a106e4d96f3b574c2dd494b541406300"], 0x9c}}, 0x40)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001003)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r7, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r8, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
memfd_create(&(0x7f0000000440)='\x00', 0x2)
accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

07:59:15 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:16 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:16 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:16 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x4)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000300)='threaded\x00', 0xffffffffffffff6f)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x60a00)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x44, 0xfffffffffffffe70, [], 0x74, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:18 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x541d, &(0x7f00000000c0)=0x3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:18 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c465f010981040000000000000003003f0003008100220300000000000040000000000000002c00000000000000010000000000380002000000000002000300000100000000090000000000000003000000000000000500000000000000ff0300000000000002000000000000000000000000000000070000000000000000000000008400000810000000000000b9ffffffffffffff00000000000000000000004e041f0400a50c00000000000051afd97ed8c135cdb28b27c7ef556e414479061eb95c8c0c49e03871dbf0df8daea363c807493fa383703d92bb17ea9a2ef4db7c34ceb38dc9d0755d75f4e3d790b7baedae007e4dc86974511b9c1e14025b781850c16b33c660ec6c9396c2aeb5289d3eb3e22abccfcf29f2783094a0869adb0073a8c1542dcd4b97a9126f6bfd9ec8ea1aff2e9d0339f06c2e71f3d8e6cfae8a43ca772c005e920dac05c8749a28e56808fc8abf9ec8e5cb59d39d034eaf1c111dd4b01786fa1f1c5940d234ff14a73b0a325e3f67566ec67f3597be29abc5f829ecc54d2274299d92977576b8"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:18 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_vs\x00')
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r7 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r6, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r8, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r9 = accept4(r6, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
shutdown(r8, 0x1)
sendto$inet6(r9, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe800000000000000300000000000000000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2302001d782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a483c9d0aaa16b43858ea55e0ec6329c2c365c93688a1acb4055d8eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x2000, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
r3 = memfd_create(&(0x7f0000000440)='rose0\x00', 0x3)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r5, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
shutdown(r7, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e2100000000030002faffffffff0500fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:18 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="23696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c5c365c9937da1acb4055d9eb85bf507436127e32d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x14000, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000440)={'veth0_to_bond\x00', 0x200})
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r5, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
shutdown(r7, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x913, r5, 0x86)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:19 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x3ff, 0x7, {0x8002, 0x3}, {0x3, 0x7}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:21 executing program 0:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
ioctl$KDSKBLED(r0, 0x4b65, 0x6)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0xb3)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TIOCNOTTY(r2, 0x5422)
write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x7ff}], 0x18)

07:59:21 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/35, 0x23}], 0x4)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:21 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:21 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:21 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@loopback, @in6}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000b80)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0xfffffffffffffffc, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)
fcntl$getown(r0, 0x9)

07:59:21 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:21 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:21 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f666979653020000ab0782ecddfc7c66f4e95e5b431d6766425fd53fab975a37a3e549d930316b41caeb11f3858c755e0ec6329c2c365c9937da1acb4055d9eb85bf5ff756127e7"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000440)='./file0\x00', 0x0, 0x100)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:21 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:21 executing program 4:
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:21 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:22 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:22 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:22 executing program 4:
rt_sigprocmask(0x0, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:22 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:22 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x400000000000011f, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000440)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000080))
open(&(0x7f00000000c0)='./file0/file1\x00', 0x10040, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)

07:59:22 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)

07:59:22 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:23 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x100, 0x0)
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0xe1b7, 0x2})
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:23 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:23 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c0300000000000000cd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec63b4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x1, 0x0)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000740))
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r6, 0x1)
syz_open_pts(r6, 0x200)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000440)="5edebd357e81")
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000eadbdf250e00000000000300000007004e976700000003000200000000000600fe6c00080000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:23 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:23 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:23 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:23 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000b80))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:24 executing program 3:
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x191)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
mlockall(0x41000002)
fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, <r2=>0x0})
prlimit64(r2, 0xf, 0x0, &(0x7f0000000240))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[], 0xfd)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x1da)
fallocate(r4, 0x48, 0x0, 0xae95)
write$cgroup_type(r4, &(0x7f0000000240)='threaded\x00', 0xf96d)
fallocate(r4, 0x3, 0x8000, 0x8001)
fallocate(r4, 0x3, 0x5e89, 0xfff9)
unshare(0x40000000)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000280))
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x100000000}, {0x306, @local}, 0x4, {0x2, 0x4e24, @remote}, 'nr0\x00'})
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x82481, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f0000000340)={0x34, 0x0, &(0x7f0000000040)})
ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f00000006c0))
getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xdb, [], 0x4, &(0x7f0000000800)=[{}, {}, {}, {}], &(0x7f0000000840)=""/219}, &(0x7f00000009c0)=0x78)
fcntl$setsig(r7, 0xa, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000740)={0x80000000, {{0x2, 0x4e22, @local}}}, 0x4ea8bbba9aa8d411)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000080))
ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000001c0)={0x5bcc46c6d224a2ab, 0x2, 0x7, {0x7fff, 0x3}, {0x5, 0x8}, @rumble={0x8, 0x8}})
ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f0000000180)={0x7, 0x1f})

07:59:24 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:24 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:24 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:24 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xed26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
mount(&(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000))
chdir(&(0x7f0000000180)='./file0\x00')
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4080, 0x0)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', 0x4}, 0x18)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000003c0))
write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x7f)
munmap(&(0x7f0000443000/0x400000)=nil, 0x400000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x4, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[{0x0, 0x6, 0x8, 0xffffffffd83f3ee6}]})
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
write$P9_RSTAT(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="820000007d020000007b00070000080000000400000000000000000000000000000002000000000800000100000000000000100076657468315f746f5f627269646765001b005d73656c66626465765e76626f786e65743070707030776c616e311d00747275737465646d696d655f747970652f70707030ba6b657972696e670000c942125735fad1e74fc7256ccb633d7aab160f8317df53cf6e8f0c249a5cd76e1fa019a3a3a381fdb85ac7c1"], 0x82)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast2, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x4000000, &(0x7f0000000680)={0xa, 0x4e20, 0x81, @mcast1, 0x7}, 0x1c)
setrlimit(0xf, &(0x7f00000002c0)={0x3ff, 0x7})
accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d67664253e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e60414cee35aa89b5c81fd67c512689baae328b67a5b1149c0722f6081ca43325c401bbf29df8d7551e0374f5fa1d631d14736af2c9896ba3b3bb91220cdaba6be63b1aaad54b80d2c136ce2ad58c2ee5"], 0x4c)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000380)={0x40000000000003d8, &(0x7f0000000580)=[{0x18c00000000, 0x9}, {0x3, 0x200}]})

07:59:27 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = accept(r1, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1f, 0x400000}, 0xfe7a)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000440)={0x10001, 0xb4ba, 0xbf21})
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r5, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000bc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x3c, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}]}, 0x3c}}, 0x10)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
shutdown(r7, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="50002abd7000fcdbdf250e000000000003000000075e0d7035a13033577134a1537e004a210000007d030002000000eeff0500fe80ef33f2784420f30a94f1662c2a4e82e100000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:27 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:27 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:28 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:28 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x0)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:28 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
r1 = dup3(r0, r0, 0x80000)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0x4, 0xb5, "7817d15672eafea027f773df1154ad5817f8b4218685b7a5ba033745c7ed6bfd9a0722b3af7556734e96d6452c0d9798982a19feb869f7a034dd96e1b506bd969b2d3996335540289a07f2b60dee18c50bd505d6485cee89a96de90602bf2628f6728eb9a29167203e02329a6902a1b4e863b7508364c9655165ccec5678f31152d57badcc620efeaba8792e500c71aeda664847beee24491119de700967ac8a020f347a5f48e816accf32551c9d886abf0991b7b9"})
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)

07:59:28 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:28 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000440)={@rand_addr=0x8000, @broadcast}, 0x8)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:28 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280), &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:28 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:29 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000608fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:29 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:29 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:29 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/180)
r0 = getpgrp(0xffffffffffffffff)
timer_create(0x9, &(0x7f00000004c0)={0x0, 0x37, 0x2, @tid=r0}, &(0x7f0000000280)=<r1=>0x0)
timer_delete(r1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f67726f75702e7374258de6fcc5e862311f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e0db18a4cb3a9cd12dcea42c652b3a47a2fbfdf6e034d804e5f0df4b9c0100e875299e6a357c000000000000000000000000", 0x2761, 0x0)
poll(&(0x7f0000000180)=[{}], 0x25, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0xc0c0583b, &(0x7f0000000140))
pipe2(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80800)
vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000500)="b8c66780ce122a64be73e5f5d9d759cea31b41efd1ad16a127ecc0225cdfdf6ec134dee91e4eb52f157971f8d89ff14d6fd63adc8f93898d", 0x38}], 0x1, 0x0)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x4, 0x94cd, 0x1, 0x7})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x28, &(0x7f0000000400)}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x51}, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x4000000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000580)=0x6, 0x4)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
io_setup(0x3, &(0x7f0000000140))
clone(0x70024100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000140))

07:59:29 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:29 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$setfpexc(0xc, 0x1)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:29 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
fsetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='/dev/input/event#\x00', 0x12, 0x1)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1, 0xfffffffffffffffc}], 0x618025aa)

07:59:31 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r5 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r4, 0x1)
sendto$inet6(r5, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85b0100000027e72d3e60417e0ed800b0117c28a7deea9f116982e93ad907c0add2f0888a8c56d51ced42b3dda60798d930fa1dedec1abdf734475ea0488e806717fb2739258cf12c0a757ee03c86a4b3859ca1daf3d6fff022173680c2402f8e83ee65737a3354e0bc5d4e52"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
dup(r0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = accept4(r4, &(0x7f0000000440)=@l2, &(0x7f0000000740)=0x80, 0x80800)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r0, 0xffffffffffffffff)
sendto$inet6(r5, &(0x7f0000000c40)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xfffffffffffffda9, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r5 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r4, 0x1)
sendto$inet6(r5, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x84800)
write$P9_RSTAT(r8, &(0x7f0000000740)={0x4d, 0x7d, 0x2, {0x0, 0x46, 0x100, 0x7, {0x80}, 0x4200000, 0xffffffffffff0001, 0x244, 0x0, 0x0, "", 0x12, '/dev/loop-control\x00', 0x0, "", 0x1, ')'}}, 0x4d)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:31 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:32 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x4}, {0xa, 0x4e21, 0x9, @mcast1, 0x1}, 0x8001, [0x8, 0x80000000, 0x4c98, 0xffffffff00000000, 0xfff, 0x401, 0x9, 0x5]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85b0100000027e72d3e60417e0ed800b0117c28a7deea9f116982e93ad907c0add2f0888a8c56d51ced42b3dda60798d930fa1dedec1abdf734475ea0488e806717fb2739258cf12c0a757ee03c86a4b3859ca1daf3d6fff022173680c2402f8e83ee65737a3354e0bc5d4e52"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
dup(r0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = accept4(r4, &(0x7f0000000440)=@l2, &(0x7f0000000740)=0x80, 0x80800)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r0, 0xffffffffffffffff)
sendto$inet6(r5, &(0x7f0000000c40)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xfffffffffffffda9, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="4de01009ba2d02d102ed80fd13aefbc50b3f3a2c4c37df5f3030a3cc506b43b2d21786a5aab70275e0803bc1b26b86ae5255f0eb64f084dff24efa30202f11bb83f7e40851852a536399cd6d8e4599f5d3", 0x51, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, r1, 0x5)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))

07:59:33 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90", 0x60, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r5 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
shutdown(r4, 0x1)
sendto$inet6(r5, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e21000000000300020000000000061cc2800000000000000000e3ff009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6005"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000480))
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r7, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x29c)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r4, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r4, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e92", 0x90, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r4, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:33 executing program 3:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x2, @ipv4={[], [], @multicast2}, 0x4}, {0xa, 0x4e21, 0x9, @mcast1, 0x1}, 0x8001, [0x8, 0x80000000, 0x4c98, 0xffffffff00000000, 0xfff, 0x401, 0x9, 0x5]}, 0x5c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 0:
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0xb3)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
write$evdev(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x7530}, 0x0, 0x0, 0x6}, {{}, 0x15, 0x8001, 0x401}, {{r0, r1/1000+10000}, 0x11, 0x5, 0x9}, {{r2, r3/1000+10000}, 0x15, 0x8, 0x4}], 0xfffffe11)

07:59:35 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eec", 0xa8, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r4, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x8000, 0x0)
ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000480))
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000780)={0xe, 0x9, 0xffff, 0x7, 0x22, "7860d2217dd37120db986b7e360c451d351a0ed6b9344885b6a644a63b8cc63c7270"}, 0x2e)
r8 = accept4(r5, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
shutdown(r6, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 3:
socket$packet(0x11, 0x3, 0x300)

07:59:35 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r4 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r3, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r5, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r6 = accept4(r3, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
shutdown(r5, 0x1)
sendto$inet6(r6, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb3)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82)
io_setup(0x2, &(0x7f0000000040)=<r1=>0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000080)="3d52c4091048821e53ba12e5536ae7c24936343f6ab35f555ce949a692de4c1b445b9ee35b04680ce6ee348bdebd2143eff89c18662ce3b778477edc21c761102dad885d20e8f53193537332679ca7284729454be2f16a8fc5a745107999a31986764647ef1e949d449550a9779f3ddcf1fcb3eb8af23d4cc96410f3bda5", 0x7e, 0x8, 0x0, 0x2, r2}, &(0x7f00000001c0))

07:59:35 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040))
r1 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)

07:59:35 executing program 3:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20010404}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x168, r1, 0xb, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf272}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x944b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x72}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x168}, 0x1, 0x0, 0x0, 0x810}, 0x4)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2809302000000030343026c2623692500060000020000000000009848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000500)=[{0x10}], 0x10}, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x7, 0x2}, {0x9, 0x4}], r4}, 0x18, 0xc2a3f3bceadb7e7c)

07:59:35 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8907, &(0x7f0000000600)={'bpq0\x00'})
lseek(r0, 0x0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffff)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @rand_addr}, 0x10)
ioctl$sock_ifreq(r1, 0x8972, &(0x7f00000000c0)={'vcan0\x00', @ifru_mtu=0x1})
lseek(r1, 0x0, 0x7)
recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000000)=@pppol2tp, 0x80, &(0x7f0000000e40), 0x0, &(0x7f00000002c0)=""/221, 0xdd}}], 0x1, 0x0, &(0x7f00000010c0))

07:59:35 executing program 5:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = accept(r1, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041"], 0x4c)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
fcntl$setsig(r0, 0xa, 0x6)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000440))
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r6 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r5, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000440), 0x3b8, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x3c5)
readv(r7, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r8 = accept4(r5, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
shutdown(r7, 0x1)
sendto$inet6(r8, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe80000000000000000000000000c954000008009900000000000300"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

[  495.235364] netlink: 17 bytes leftover after parsing attributes in process `syz-executor3'.
[  495.247729] netlink: 17 bytes leftover after parsing attributes in process `syz-executor3'.
07:59:35 executing program 3:
mkdir(&(0x7f0000000040)='./control\x00', 0x0)
r0 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000940000)={0x2, 0xffffffffffffffdd, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000))
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
rename(&(0x7f0000000140)='./control\x00', &(0x7f00000001c0)='./file0\x00')

07:59:35 executing program 3:
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x3, 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)="004c6e2dc00000000280924a81fbda787f9fcd09002eb1b3496c222b1faf364f5835f9288f4a2201a71b1a9c29eb23e682bb0efe9fdf7c961079d8370df59bd97e22332ff3bcd7000000", 0x275a, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x40000, 0xfff)
eventfd(0x100000000)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x0, 0x0, 0x10001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x70, 0x7f, 0x10000000000, 0x100, 0x1000, 0x0, 0x2, 0x58000, 0xc, 0x1, 0xbcb1, 0x3, 0x6b, 0x6, 0x10001, 0x10001, 0x4, 0x3, 0x602a, 0x6, 0x4, 0x3f, 0x7, 0x4, 0x71509f09, 0x9, 0x3, 0x6, 0x100, 0x5, 0x0, 0x6, 0x8001, 0x8001, 0x58, 0xda, 0xfff, 0x0, 0x7ff, 0x1, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffa}, 0x404, 0xae4, 0x5, 0x6, 0x7ff, 0x7ff, 0x52})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x1000000000000000, 0x4)
fsync(r2)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})
close(r2)

07:59:35 executing program 1:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'rose0\x00', 0x400})
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b758", 0xb4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 2:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020000ab0782ecd5fc7c66f4e95e5b431d6766425fd53fab975a37a3e549d0aaa16b43858ea55e0ec6329c2c365c9937da1acb4055d9eb85bf507436127e72d3e6041987d91694bd5554024fa74ea06fd7ad6ca42669da5c299dd40"], 0x65)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r3 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r2, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
shutdown(r4, 0x1)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:35 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
gettid()
getpid()
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = getuid()
lchown(&(0x7f0000000280)='./bus\x00', r2, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000240))
sendto(r1, &(0x7f00000004c0)="209754ecf34893564af414bedc6b105442a1ffabe6566dc22d43c565b35c1199a85c372a6e27479ef5addad2d56a77387479134c9e42466dc249fde630fa86f67c716a90defb4a3bc532ab161880c47eeb8a8ff8ca1664c9d4399b238603df970da6bf21953fbb183bf62babfb0acb9a74edafe6bcdd28926f2bad062a54c0803fdf2faa1b5f9e2f96af3f09bf434d3f4cf3878c1fe456afb47428e552cbdf8557f9aa695468d500805d357bf799a119477f00d0d7f2c0e4d3dafc72ae8b3a6fa3ff68d5561139183ff70bae7e3ea08174e56211cc23594595be70d0a1c131a095336cbdbb", 0xe5, 0x8000, &(0x7f0000000040)=@sco={0x1f, {0x9, 0x80, 0x7f, 0x0, 0x6}}, 0x80)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigaction(0x30, &(0x7f0000000340)={&(0x7f00000001c0)="c401792b780041dd33cfc4e16e5285e800000066450f38020966660f6c2cd1c461265aeff04481060000002199c40211af19", {}, 0x10000000, &(0x7f00000002c0)="c4e27d0e3500000000c48213f6b0fbffffff430f78ab89000000f042804c412702ff8e07d90000f2f046302f0f1bae87a1591ef3a5c4a17fe6b50000008045d9f7"}, &(0x7f0000000440)={&(0x7f0000000380)="8f6950014e1f36420f54dbc4a20dbfdb8f6978c11b8f885885cdf9c481ac5cc93e0ffd8bff2f027bf30f7ffcc441e55d1ac4217c118075980000", {}, 0x0, &(0x7f0000000400)="f243afc4c3d122641f1213660fe47cfd0041700cc44199d44006c463b5496f00fa66470f78c30056f3440f2cc0c4237122b5040000000d64410f0f7c81e1a7"}, 0x8, &(0x7f0000000480))
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000003c0)=r1)
sysinfo(&(0x7f00000007c0)=""/154)
ioctl$BLKPG(r3, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)={0x171, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="03638c0210a53b613c200000002131be834184db11f6ea09fe9fc3a7df39d29fa660644a2b87b6d3d964e0a7b5e0b501237341739b4879846767d6f57711a554b31ddfdbca8a616f86b73312112ece69d251d9587dfef9cac83ecb41f9dbf18fb9183a41052ecd4cac5385aecb0a71cef776a4c2b2a5b30b6726fbda439eb68d541e289ca4ebd43ab4c78a0c6d99f9149232816d0f9aeed31d347735022b91ae2ae5877e1ca58df62d8eadb2bc763811dcb62648f8c9525c336c925e33153ced78b8592d96761eb5dbb11bb576459b01d2057a3228cd5c8ff0bba1e8337df8cb0328081be4acd86cbfd015098b301c34f70b85f92a1b84b422f0b5008bb08f5f4bbc6f14ea9df49d624f845e43f3ea10688564eb36ee47f6ea58ff890cd277912e8347c450e459c5b4395671ea0deac0fd782b2af85af444a01047a1dd7fdc4b3773c086b6fe143272e0693b8326bc0c606fc08eeca691d6c78f382840af54987ca0dc3124373567e774a79712fee053f0"], 0x0, 0x0, &(0x7f0000000100)})
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000005c0)={0x8, 0x7, 0xff, 0xc3, 0x101, 0x7fff, 0x401, 0x0, 0x6, 0x36})

07:59:35 executing program 4:
rt_sigprocmask(0x2, &(0x7f0000000280)={0x26}, &(0x7f00000002c0), 0x8)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000240)=0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)})
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x46)
r5 = socket$inet6(0xa, 0x80a, 0x5f7a)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0x80, 0x2c}, 0xc)
listen(r4, 0x80001000)
ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000300)={'rose0\x00', {0x2, 0x4e24, @multicast2}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, &(0x7f0000000300), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
readv(r6, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/155}, {&(0x7f00000008c0)=""/96}, {&(0x7f0000000940)=""/226}, {&(0x7f0000000a40)=""/99}, {&(0x7f0000000ac0)=""/35}], 0x1000000000000159)
r7 = accept4(r4, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0)
syz_open_dev$binder(&(0x7f00000005c0)='/dev/binder#\x00', 0x0, 0x2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
shutdown(r6, 0x1)
sendto$inet6(r7, &(0x7f0000000180)="41465a39a172dd651d1f01fcdb315cb1fc1ea8470b32103a9a9ee1d40be9106bc3fedaf3e877113460132182cb1ecd0301db37f72e11b95aa592e5ada4368d91d5502919a4523d017b370f57eed68d0d2bf06798038d0d1e551ebe5b8583ae90b8d3daf27d656dcf5409fe52c6167c96e8cc0498db874c39c7e317ff08cbfe6e2888391c83288ca9ef54ce7231b42e923793cf99e68338f10fee42c601e2016ab984f67a3a285eecc4f670f486ce30db87f9b75852fdc7baab50cbdae084648e", 0xc0, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10002abd7000fcdbdf250e00000000000300000007004e210000000003000200000000000600fe8000000000000000000000000000aa0000080099000000000003000100"], 0x1}, 0x1, 0x0, 0x0, 0x804}, 0x0)

07:59:36 executing program 3:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/status\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)="3f800070735f721c6c6c7538002dbb34110133d1b1cca157d3f48e93fe3ac93737261bbddc783cdf0700d2dec304eddf72f20801bd08d3ee43e34e7951ee2c56edfc8a8f8e")
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee2a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x7000, 0x3, &(0x7f0000ff3000/0x7000)=nil)
openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x800, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)="3f800070735f721c6c6c7538002dbb34110133d1b1cca157d3f48e93fe3ac93737261bbddc783cdf0700d2dec304eddf72f20801bd08d3ee43e34e7951ee2c56edfc8a8f8e")
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000006c0)={0x7, 0x101, 0x6, 0x7ba, 0xfa6f}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)="3f800070735f721c6c6c7538002dbb34110133d1b1cca157d3f48e93fe3ac93737261bbddc783cdf0700d2dec304eddf72f20801bd08d3ee43e34e7951ee2c56edfc8a8f8e")
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {0x1f, 0x3, 0x1000, 0x101}, 0x49, [0x3b4, 0x200, 0xffffffffffff8000, 0x0, 0x81, 0x5, 0xff, 0x6c4, 0x69fd29eb, 0xffffffff, 0x1f, 0x1, 0x1, 0x7, 0x80000000, 0x6, 0x81, 0xa68b, 0x4, 0x3780000000000000, 0x0, 0x100000000, 0x80000001, 0x6, 0x9, 0xbd6d, 0x4, 0x400, 0x9, 0xffffffffffffc4a0, 0x6, 0x1, 0x80000001, 0x7, 0x9, 0x1, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x5, 0x1, 0x3, 0x7fff, 0xfff, 0xe, 0x5, 0x0, 0x1, 0x2, 0x6, 0x100000000, 0x8000, 0x6, 0x58, 0x2, 0x10000, 0x5, 0x16, 0x6, 0x1, 0x100, 0x35f, 0xe27d], [0x8, 0x5, 0x100000000, 0x3, 0x2812, 0x80, 0x5, 0x8, 0xf3, 0x773, 0x4, 0x9, 0x40000000, 0x292, 0x6, 0x80000000, 0x61, 0x7fff, 0x80000001, 0x3, 0xd3, 0x7, 0x8, 0x9, 0x3, 0x7, 0x401, 0x8, 0xffffffff, 0x8001, 0xfff, 0x4, 0x7005, 0x7, 0x5, 0x63, 0x2, 0x8, 0x1ff, 0x7, 0x8, 0xd8, 0x9, 0x2, 0x7fff, 0x5, 0x8, 0x20, 0x81, 0x20, 0x97e1, 0x5576, 0x1f, 0x4, 0x20, 0x3, 0x4, 0x2, 0xe1, 0xdd1, 0x4, 0xfffffffffffffe00, 0xd00, 0x2], [0x8, 0x3, 0x30f, 0x7, 0xbe, 0x5, 0x9, 0x9, 0x9f5, 0x0, 0x100, 0x0, 0xfffffffffffffffb, 0x80000001, 0x5, 0x5841, 0x2, 0x8, 0x3, 0xfffffffffffffffc, 0x4, 0x8, 0x7ff, 0x101, 0x9d6, 0x32b4, 0x7, 0x195, 0x4, 0x5, 0x1ff, 0x81, 0x1, 0x18, 0xb7, 0x10001, 0x6, 0x3, 0x8, 0x2, 0x0, 0x7, 0x3, 0x81, 0x6, 0xffffffff, 0x80000000, 0x1f74, 0x3, 0x56d505ec, 0x5, 0x2, 0xfc00, 0xfff, 0x80, 0x3, 0x0, 0x401, 0x200, 0x82, 0x8, 0x9, 0x8, 0x1], [0x1, 0x7b, 0xc, 0x7804, 0xd0, 0x6, 0x4, 0x8000, 0x100000000, 0x9, 0x2, 0x81, 0x0, 0xffffffff80000001, 0x0, 0x50000000, 0x3f, 0x8001, 0x9, 0x9, 0x8, 0x9, 0x7, 0x4, 0x204, 0x6, 0xaae5, 0xffffffffffffffff, 0x1f, 0x2, 0x7fff, 0x3, 0x3, 0x7fffffff, 0x1, 0x1, 0x10001, 0xfff, 0xdb, 0x8, 0x7, 0x1ff, 0x8f, 0x7, 0x0, 0xf10e, 0x3, 0x1000, 0x71, 0xc55, 0x400, 0x1, 0x2, 0x4, 0x8f7f, 0x9, 0xaf0, 0x5, 0x7fffffff, 0xd7, 0x8, 0x0, 0x5, 0x1000]}, 0x45c)

[  495.827549] ==================================================================
[  495.834981] BUG: KASAN: use-after-free in get_disk+0xb7/0xd0
[  495.840777] Read of size 8 at addr ffff8801c86bc930 by task blkid/20822
[  495.847518] 
[  495.849142] CPU: 0 PID: 20822 Comm: blkid Not tainted 4.14.78+ #24
[  495.855452] Call Trace:
[  495.858048]  dump_stack+0xb9/0x11b
[  495.861614]  print_address_description+0x60/0x22b
[  495.866462]  kasan_report.cold.6+0x11b/0x2dd
[  495.870865]  ? get_disk+0xb7/0xd0
[  495.874319]  get_disk+0xb7/0xd0
[  495.877597]  get_gendisk+0xe4/0x230
[  495.881224]  __blkdev_get+0x345/0xe50
[  495.885041]  ? trace_hardirqs_on+0x10/0x10
[  495.889282]  ? __blkdev_put+0x6e0/0x6e0
[  495.893254]  ? HARDIRQ_verbose+0x10/0x10
[  495.897319]  blkdev_get+0x97/0x8c0
[  495.900859]  ? bd_may_claim+0xe0/0xe0
[  495.904651]  ? bd_acquire+0x149/0x2c0
[  495.908450]  ? lock_downgrade+0x560/0x560
[  495.912592]  ? lock_acquire+0x10f/0x380
[  495.916557]  ? bd_acquire+0x113/0x2c0
[  495.920377]  blkdev_open+0x1bd/0x240
[  495.924084]  ? security_file_open+0x88/0x190
[  495.928494]  do_dentry_open+0x426/0xda0
[  495.932467]  ? bd_acquire+0x2c0/0x2c0
[  495.936282]  vfs_open+0x11c/0x210
[  495.939737]  path_openat+0x4eb/0x23a0
[  495.943548]  ? path_mountpoint+0x9a0/0x9a0
[  495.947783]  ? kasan_kmalloc.part.1+0x4f/0xd0
[  495.952285]  ? trace_hardirqs_on+0x10/0x10
[  495.956515]  ? check_preemption_disabled+0x34/0x160
[  495.961553]  ? perf_trace_lock_acquire+0x126/0x4d0
[  495.966498]  do_filp_open+0x197/0x270
[  495.970300]  ? may_open_dev+0xd0/0xd0
[  495.974120]  ? _raw_spin_unlock+0x29/0x40
[  495.978283]  do_sys_open+0x2ef/0x580
[  495.982009]  ? filp_open+0x60/0x60
[  495.985574]  ? up_read+0x17/0x30
[  495.988936]  ? __do_page_fault+0x64c/0xb60
[  495.993170]  ? do_syscall_64+0x43/0x4b0
[  495.997139]  ? do_sys_open+0x580/0x580
[  496.001033]  do_syscall_64+0x19b/0x4b0
[  496.004932]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  496.010113] RIP: 0033:0x7f6cf9030120
[  496.013815] RSP: 002b:00007ffeb354fb18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  496.021528] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cf9030120
[  496.028792] RDX: 00007ffeb3551f1e RSI: 0000000000000000 RDI: 00007ffeb3551f1e
[  496.036060] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[  496.043325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001e6e030
[  496.050584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[  496.057871] 
[  496.059491] Allocated by task 20806:
[  496.063202]  kasan_kmalloc.part.1+0x4f/0xd0
[  496.067516]  kmem_cache_alloc_trace+0x138/0x300
[  496.072180]  alloc_disk_node+0x5f/0x3b0
[  496.076149]  loop_add+0x3e9/0x840
[  496.079597]  loop_probe+0x14f/0x180
[  496.083218]  kobj_lookup+0x230/0x420
[  496.086923]  get_gendisk+0x32/0x230
[  496.090540]  __blkdev_get+0x345/0xe50
[  496.094333]  blkdev_get+0x97/0x8c0
[  496.097905]  blkdev_open+0x1bd/0x240
[  496.101639]  do_dentry_open+0x426/0xda0
[  496.105615]  vfs_open+0x11c/0x210
[  496.109062]  path_openat+0x4eb/0x23a0
[  496.112857]  do_filp_open+0x197/0x270
[  496.116652]  do_sys_open+0x2ef/0x580
[  496.120357]  do_syscall_64+0x19b/0x4b0
[  496.124236]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  496.129410] 
[  496.131032] Freed by task 20809:
[  496.134401]  kasan_slab_free+0xac/0x190
[  496.138370]  kfree+0xf5/0x310
[  496.141490]  device_release+0xf4/0x1a0
[  496.145367]  kobject_put+0x146/0x200
[  496.149074]  put_disk+0x1f/0x30
[  496.152346]  __blkdev_get+0x564/0xe50
[  496.156138]  blkdev_get+0x97/0x8c0
[  496.159669]  blkdev_open+0x1bd/0x240
[  496.163377]  do_dentry_open+0x426/0xda0
[  496.167343]  vfs_open+0x11c/0x210
[  496.170789]  path_openat+0x4eb/0x23a0
[  496.174580]  do_filp_open+0x197/0x270
[  496.178376]  do_sys_open+0x2ef/0x580
[  496.182082]  do_syscall_64+0x19b/0x4b0
[  496.185965]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  496.191140] 
[  496.192763] The buggy address belongs to the object at ffff8801c86bc400
[  496.192763]  which belongs to the cache kmalloc-2048 of size 2048
[  496.205588] The buggy address is located 1328 bytes inside of
[  496.205588]  2048-byte region [ffff8801c86bc400, ffff8801c86bcc00)
[  496.217628] The buggy address belongs to the page:
[  496.222550] page:ffffea000721ae00 count:1 mapcount:0 mapping:          (null) index:0x0 compound_mapcount: 0
[  496.232516] flags: 0x4000000000008100(slab|head)
[  496.237264] raw: 4000000000008100 0000000000000000 0000000000000000 00000001000f000f
[  496.245138] raw: 0000000000000000 0000000500000001 ffff8801da802800 0000000000000000
[  496.253015] page dumped because: kasan: bad access detected
[  496.258718] 
[  496.260337] Memory state around the buggy address:
[  496.265259]  ffff8801c86bc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  496.272612]  ffff8801c86bc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  496.279960] >ffff8801c86bc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  496.287306]                                      ^
[  496.292229]  ffff8801c86bc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  496.299578]  ffff8801c86bca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  496.306925] ==================================================================
[  496.314277] Disabling lock debugging due to kernel taint
[  496.319780] Kernel panic - not syncing: panic_on_warn set ...
[  496.319780] 
[  496.327143] CPU: 0 PID: 20822 Comm: blkid Tainted: G    B           4.14.78+ #24
[  496.334658] Call Trace:
[  496.337237]  dump_stack+0xb9/0x11b
[  496.340769]  panic+0x1bf/0x3a4
[  496.343970]  ? add_taint.cold.4+0x16/0x16
[  496.348118]  kasan_end_report+0x43/0x49
[  496.352082]  kasan_report.cold.6+0x77/0x2dd
[  496.356391]  ? get_disk+0xb7/0xd0
[  496.359832]  get_disk+0xb7/0xd0
[  496.363098]  get_gendisk+0xe4/0x230
[  496.366730]  __blkdev_get+0x345/0xe50
[  496.370519]  ? trace_hardirqs_on+0x10/0x10
[  496.374743]  ? __blkdev_put+0x6e0/0x6e0
[  496.378709]  ? HARDIRQ_verbose+0x10/0x10
[  496.382759]  blkdev_get+0x97/0x8c0
[  496.386292]  ? bd_may_claim+0xe0/0xe0
[  496.390076]  ? bd_acquire+0x149/0x2c0
[  496.393866]  ? lock_downgrade+0x560/0x560
[  496.398000]  ? lock_acquire+0x10f/0x380
[  496.401977]  ? bd_acquire+0x113/0x2c0
[  496.405782]  blkdev_open+0x1bd/0x240
[  496.409484]  ? security_file_open+0x88/0x190
[  496.413882]  do_dentry_open+0x426/0xda0
[  496.417848]  ? bd_acquire+0x2c0/0x2c0
[  496.421642]  vfs_open+0x11c/0x210
[  496.425084]  path_openat+0x4eb/0x23a0
[  496.428878]  ? path_mountpoint+0x9a0/0x9a0
[  496.433105]  ? kasan_kmalloc.part.1+0x4f/0xd0
[  496.437594]  ? trace_hardirqs_on+0x10/0x10
[  496.441827]  ? check_preemption_disabled+0x34/0x160
[  496.446833]  ? perf_trace_lock_acquire+0x126/0x4d0
[  496.451765]  do_filp_open+0x197/0x270
[  496.455554]  ? may_open_dev+0xd0/0xd0
[  496.459353]  ? _raw_spin_unlock+0x29/0x40
[  496.463498]  do_sys_open+0x2ef/0x580
[  496.467207]  ? filp_open+0x60/0x60
[  496.470736]  ? up_read+0x17/0x30
[  496.474088]  ? __do_page_fault+0x64c/0xb60
[  496.478310]  ? do_syscall_64+0x43/0x4b0
[  496.482274]  ? do_sys_open+0x580/0x580
[  496.486150]  do_syscall_64+0x19b/0x4b0
[  496.490042]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  496.495215] RIP: 0033:0x7f6cf9030120
[  496.498912] RSP: 002b:00007ffeb354fb18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  496.506604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6cf9030120
[  496.513859] RDX: 00007ffeb3551f1e RSI: 0000000000000000 RDI: 00007ffeb3551f1e
[  496.521113] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[  496.528369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001e6e030
[  496.535626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[  496.543222] Kernel Offset: 0x27e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  496.554128] Rebooting in 86400 seconds..