9c}, 0x10001) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1}, 0x10) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000000880)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r1, 0x0) setrlimit(0xf, &(0x7f00000005c0)={0x4, 0x5}) sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x9e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x100, 0x0) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000001900)=""/4110, 0x100e}], 0x7, &(0x7f0000000480)=""/198, 0xc6}, 0x6}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)=""/240, 0xf0}, {&(0x7f0000001700)=""/21, 0x15}], 0x2, &(0x7f0000001780)=""/24, 0x18}, 0x7}], 0x2, 0x2, &(0x7f0000001880)={r4, r5+10000000}) io_pgetevents(r3, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0) socket$inet(0x2, 0x8080f, 0x8) creat(&(0x7f0000000840)='./file0\x00', 0x106) io_destroy(r3) 14:42:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000000880)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r1, 0x0) setrlimit(0xf, &(0x7f00000005c0)={0x4, 0x5}) sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x9e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x100, 0x0) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000001900)=""/4110, 0x100e}], 0x7, &(0x7f0000000480)=""/198, 0xc6}, 0x6}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)=""/240, 0xf0}, {&(0x7f0000001700)=""/21, 0x15}], 0x2, &(0x7f0000001780)=""/24, 0x18}, 0x7}], 0x2, 0x2, &(0x7f0000001880)={r4, r5+10000000}) io_pgetevents(r3, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0) socket$inet(0x2, 0x8080f, 0x8) creat(&(0x7f0000000840)='./file0\x00', 0x106) io_destroy(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getrlimit(0x3, &(0x7f0000000880)) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pidfd_open(r1, 0x0) (async) setrlimit(0xf, &(0x7f00000005c0)={0x4, 0x5}) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x9e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) io_setup(0x40, &(0x7f0000000280)) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x100, 0x0) (async) clock_gettime(0x0, &(0x7f0000001840)) (async) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000001900)=""/4110, 0x100e}], 0x7, &(0x7f0000000480)=""/198, 0xc6}, 0x6}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)=""/240, 0xf0}, {&(0x7f0000001700)=""/21, 0x15}], 0x2, &(0x7f0000001780)=""/24, 0x18}, 0x7}], 0x2, 0x2, &(0x7f0000001880)={r4, r5+10000000}) (async) io_pgetevents(r3, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0) (async) socket$inet(0x2, 0x8080f, 0x8) (async) creat(&(0x7f0000000840)='./file0\x00', 0x106) (async) io_destroy(r3) (async) 14:42:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:32 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r3, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:32 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r3}, 0x80) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, &(0x7f0000000880)) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r1, 0x0) (async) setrlimit(0xf, &(0x7f00000005c0)={0x4, 0x5}) sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x9e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x100, 0x0) (async) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/178, 0xb2}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000001900)=""/4110, 0x100e}], 0x7, &(0x7f0000000480)=""/198, 0xc6}, 0x6}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)=""/240, 0xf0}, {&(0x7f0000001700)=""/21, 0x15}], 0x2, &(0x7f0000001780)=""/24, 0x18}, 0x7}], 0x2, 0x2, &(0x7f0000001880)={r4, r5+10000000}) (async) io_pgetevents(r3, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0) socket$inet(0x2, 0x8080f, 0x8) creat(&(0x7f0000000840)='./file0\x00', 0x106) (async) io_destroy(r3) 14:42:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r4, 0x0) getresuid(&(0x7f0000002380), &(0x7f00000023c0)=0x0, &(0x7f0000002400)) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r6, r6) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r8 = dup2(r7, r7) ioctl$EVIOCSKEYCODE_V2(r8, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002440), &(0x7f00000024c0)=0x60) r9 = getuid() r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r10, r10) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r12 = dup2(r11, r11) ioctl$EVIOCSKEYCODE_V2(r12, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r13 = perf_event_open(&(0x7f0000002680)={0x3, 0x80, 0xff, 0x1f, 0x0, 0x1, 0x0, 0x7fffffffffffffff, 0x8d00, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x80, 0x39d, 0x4, 0x6, 0xd8, 0x7, 0x0, 0x0, 0x2f, 0x0, 0x6}, r0, 0xf, 0xffffffffffffffff, 0xa) getresuid(&(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)=0x0) r15 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = pidfd_open(r15, 0x0) r17 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)="a0f424297b3aef702a5cc144c2e3ce1f9f27471e1467441d822ab4eeb6981b300bdd6d9c32e7329e2aae6c67b9673cb1572ee0238200b3bbbb1063924f920724991277e4efa63f34744e402ce217ef00b68530388bd61be2918f759ccdb611b8595c1cfb3a0fb7c952bee26cc6102ab7f1f3c7e45e5799a2ef7d7f9bfd86783a204af01059fcea1f667681beb20b5d18ebea6560ed575dc53d9deaf9d6f5212fb2c8c6197754f6", 0xa7}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000002a40)="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", 0x19c}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}], 0x50, 0x10}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000600)="b5e272d63c3e920f9d606585c7df48c1555e547eb80b494cad11a8c095815fdc29591fcb8fec59d47e93f5b319c37c5a8d5476e4c99a7a47b30913df0a05b3330da4fc3eba3846b6153b9c917a75f8be0673742addccca244b91c0c2b8a8de", 0x5f}, {&(0x7f0000000680)="92fdbfe94fbad3b9faefe2f386eeafe33825f58106b5db2804d117479305ec38c06a210f26017e175f9d446dce1cf856641d5f9f19151f02d4058fed0074cb33181582312223eae450079ca121dedee8ddc87899513f1f4bd5f544cbf09ded273142acb783b4bb16d32c7a5bb7d427f2d1c73b0a5e638d1d062e9a83e4ea580a5c2d7536f45f0f562cfc590017dfb83418a3680349825957d7d38c4eaa7b4422c9591c3eef7a5a738ab3542b7b6e0bf0268c39198d01c0f46872e6e078b40bc0a6ec9cb1fe04c67e9f83b20beaafebb343710da5acba55", 0xd7}, {&(0x7f0000002c00)="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", 0x162}, {&(0x7f0000000880)="8a4932772be4389c41c48098624f5ff14bf8a5b75a715cb6a7b1ffc86605c47a4e71158e76", 0x25}, {&(0x7f00000008c0)="ae2e46ea6df011de97217cc0d08fe812db94cd5a4e3c0a9e0d0350785d6cc402076dcd16a5b899c5067888d686316bb2caf5b35e9fd3d29708a8b3b992e92516b3e7a8e5bfcc158e8b1717591a4e25ea76888213b0c43a3e1f623f13451845dcfff759d3ad23dfe1a628c0440fc018927894d1e1b72c75ee67875b680c50f25c3cec8ec729853a96d05c71e27d33d60d72217a86c6bbba7d6f6f914e25", 0x9d}, {&(0x7f0000000980)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x88, 0x800}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1c0000000000000001000091204dac00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r16, @ANYRES32, @ANYRES32=r3], 0x58, 0x4000}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000021c0)="fde66a871c243c5f1161f9980ba7e59f4789185309eeee480b2fea35c83f04ee324f4b97efca3de6acae83f9f62b0df768a9da064ba71e10373782a95f9692a93b86", 0x42}, {&(0x7f0000002240)="cf4aa92ef0c0debea7af9943223247078660525fa8fb47a00762fdc6da359f0eb80065e270e75fcb1301950379f294287d887247b104039b89597996f4d9a265bb5dc8076901c2cd46f72947e077c356a90764d10b8d04c829c1256f04a4c733a880f79d0d27b9aeafb9abe44eb6caa5856cbe39d5a561e8efa0ea7b640af5859b640bb45723fcf5c53fd58c7a4a5f695785b575e71d9a1464020a4713c862ceb7628bef7b3a5348c9ce852b700f6a1bf19cf2d6b06664a7507b7f73f0742c507273fbd9e6dffe4602c65734", 0xcc}], 0x2, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x10}}], 0x30, 0x11}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)="412dc0d53130f6387fdef25db5a0b906041cac0bbc74c5b7703ac846d9711ddec4275b1952cfc3f8fbb962df3120f08b18f64651cacce4d55bfe0227ed65d39328700912d204a868173d11661497a9915afea5cf2eba00c0c3e72964636f754dfb886fbca0b0155c26efa390eb31a480fed6b8b4f0a987e8308e3aa04163fdfc6e445ecfed568652dd9c0c11491a7e32a89380af250a7d1775f392c081519a8213d1ca67cec89c8b4df4dfba75d08982106a5cae65b8d64a04ba386afb4d8c06440abe152431dc6025a83e135126f3d8ddd78eefd678d79cacf22bc6d7b67adb1451d2db87aab0b4171a", 0xea}, {&(0x7f0000000400)="e3c988833edb1b3fa60fba1128de6e87503212d9098a72179dad668c7cd14e39d4c10d9142b1236786d227825cc7b660abf377d1dfd1adcf20e8254e38e4bae6bd3f8b1344651883c6d158432e36feb11b7a1083b2180558d2b87e1215515be20bf9ae0b1b9e760d8829dd402439e6aceb1fa1c681ef7e8ac15f7e2c49", 0x7d}, {&(0x7f0000000780)="19b0ccb29de094e2665361943575937b4eb0462a2b841ae2dfeed41f8bbaa96a366e6163f28a5ff66fcee229784d72d3e793a64d825d36eff7f7fd777e28560ae1da364cfa0ae3a6ccfdb7b2cb9d740d4728bc99423417206f5ac73300d0b58dc0c3917340936e29c82dc3951e89a88d58bdad54768533729d8d683833a7a903a2960c21d47009a8f6916e84c0f2e42cbb30e8f390194462bde4d63608c11fa6ae1ffa31029324dc6d", 0xa9}], 0x3, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r10, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17}}}], 0xe0, 0x24000000}}], 0x6, 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r18, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) io_destroy(r18) 14:42:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r3}, 0x80) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r3, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r4, 0x0) getresuid(&(0x7f0000002380), &(0x7f00000023c0)=0x0, &(0x7f0000002400)) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r6, r6) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r8 = dup2(r7, r7) ioctl$EVIOCSKEYCODE_V2(r8, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002440), &(0x7f00000024c0)=0x60) (async) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002440), &(0x7f00000024c0)=0x60) r9 = getuid() r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r10, r10) (async) dup2(r10, r10) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r12 = dup2(r11, r11) ioctl$EVIOCSKEYCODE_V2(r12, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async) ioctl$EVIOCSKEYCODE_V2(r12, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r13 = perf_event_open(&(0x7f0000002680)={0x3, 0x80, 0xff, 0x1f, 0x0, 0x1, 0x0, 0x7fffffffffffffff, 0x8d00, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x80, 0x39d, 0x4, 0x6, 0xd8, 0x7, 0x0, 0x0, 0x2f, 0x0, 0x6}, r0, 0xf, 0xffffffffffffffff, 0xa) getresuid(&(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)) (async) getresuid(&(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)=0x0) r15 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = pidfd_open(r15, 0x0) geteuid() (async) r17 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)="a0f424297b3aef702a5cc144c2e3ce1f9f27471e1467441d822ab4eeb6981b300bdd6d9c32e7329e2aae6c67b9673cb1572ee0238200b3bbbb1063924f920724991277e4efa63f34744e402ce217ef00b68530388bd61be2918f759ccdb611b8595c1cfb3a0fb7c952bee26cc6102ab7f1f3c7e45e5799a2ef7d7f9bfd86783a204af01059fcea1f667681beb20b5d18ebea6560ed575dc53d9deaf9d6f5212fb2c8c6197754f6", 0xa7}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000002a40)="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", 0x19c}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}], 0x50, 0x10}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000600)="b5e272d63c3e920f9d606585c7df48c1555e547eb80b494cad11a8c095815fdc29591fcb8fec59d47e93f5b319c37c5a8d5476e4c99a7a47b30913df0a05b3330da4fc3eba3846b6153b9c917a75f8be0673742addccca244b91c0c2b8a8de", 0x5f}, {&(0x7f0000000680)="92fdbfe94fbad3b9faefe2f386eeafe33825f58106b5db2804d117479305ec38c06a210f26017e175f9d446dce1cf856641d5f9f19151f02d4058fed0074cb33181582312223eae450079ca121dedee8ddc87899513f1f4bd5f544cbf09ded273142acb783b4bb16d32c7a5bb7d427f2d1c73b0a5e638d1d062e9a83e4ea580a5c2d7536f45f0f562cfc590017dfb83418a3680349825957d7d38c4eaa7b4422c9591c3eef7a5a738ab3542b7b6e0bf0268c39198d01c0f46872e6e078b40bc0a6ec9cb1fe04c67e9f83b20beaafebb343710da5acba55", 0xd7}, {&(0x7f0000002c00)="e5fdd89f229f031289aeead3929c454507feeaf05fc0cb6920a9f588c090ec086024696dc110d30bcd0d6c3c7d2ae1072336876a1b739076e63ec6854f28e633dc791fcf69fcdd8d46fc5cb704b26e8f1daea98879afac4e14b1f61456cac27696092311c56cf38fa6bd32a1154ab9789be7a0e42880af86419451a0aa9c1037e85c3d755d9f75aef4292c94f260310b70e8506f257f03a8c2fa11cc1f4ee8da739c0174dd9bdc9c34911860c8c2146cede1da5a477a3417ee05242ad04ce3b7b5fca2124a2ba92000526c5f4a7822868c0bbb101d6290ea1a4f0273cf9a28dd4cb1c3d9f00ea6d32e554af4e6a7238e7886bb5f0086d25a1139947f4b10a5a826ee8756ba63dd9d019a1795e88a27a4fa4b29a9136656bcc9164aa91d1881e36384b892e293ee38afff8d6ad9b751fc77d2227d05ab64f0b2fb28968e32ed86fea906c5931609b8fe38524e45393c79602aa5496a944ea0f142814038e0265f1f62", 0x162}, {&(0x7f0000000880)="8a4932772be4389c41c48098624f5ff14bf8a5b75a715cb6a7b1ffc86605c47a4e71158e76", 0x25}, {&(0x7f00000008c0)="ae2e46ea6df011de97217cc0d08fe812db94cd5a4e3c0a9e0d0350785d6cc402076dcd16a5b899c5067888d686316bb2caf5b35e9fd3d29708a8b3b992e92516b3e7a8e5bfcc158e8b1717591a4e25ea76888213b0c43a3e1f623f13451845dcfff759d3ad23dfe1a628c0440fc018927894d1e1b72c75ee67875b680c50f25c3cec8ec729853a96d05c71e27d33d60d72217a86c6bbba7d6f6f914e25", 0x9d}, {&(0x7f0000000980)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x88, 0x800}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1c0000000000000001000091204dac00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r16, @ANYRES32, @ANYRES32=r3], 0x58, 0x4000}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000021c0)="fde66a871c243c5f1161f9980ba7e59f4789185309eeee480b2fea35c83f04ee324f4b97efca3de6acae83f9f62b0df768a9da064ba71e10373782a95f9692a93b86", 0x42}, {&(0x7f0000002240)="cf4aa92ef0c0debea7af9943223247078660525fa8fb47a00762fdc6da359f0eb80065e270e75fcb1301950379f294287d887247b104039b89597996f4d9a265bb5dc8076901c2cd46f72947e077c356a90764d10b8d04c829c1256f04a4c733a880f79d0d27b9aeafb9abe44eb6caa5856cbe39d5a561e8efa0ea7b640af5859b640bb45723fcf5c53fd58c7a4a5f695785b575e71d9a1464020a4713c862ceb7628bef7b3a5348c9ce852b700f6a1bf19cf2d6b06664a7507b7f73f0742c507273fbd9e6dffe4602c65734", 0xcc}], 0x2, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x10}}], 0x30, 0x11}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)="412dc0d53130f6387fdef25db5a0b906041cac0bbc74c5b7703ac846d9711ddec4275b1952cfc3f8fbb962df3120f08b18f64651cacce4d55bfe0227ed65d39328700912d204a868173d11661497a9915afea5cf2eba00c0c3e72964636f754dfb886fbca0b0155c26efa390eb31a480fed6b8b4f0a987e8308e3aa04163fdfc6e445ecfed568652dd9c0c11491a7e32a89380af250a7d1775f392c081519a8213d1ca67cec89c8b4df4dfba75d08982106a5cae65b8d64a04ba386afb4d8c06440abe152431dc6025a83e135126f3d8ddd78eefd678d79cacf22bc6d7b67adb1451d2db87aab0b4171a", 0xea}, {&(0x7f0000000400)="e3c988833edb1b3fa60fba1128de6e87503212d9098a72179dad668c7cd14e39d4c10d9142b1236786d227825cc7b660abf377d1dfd1adcf20e8254e38e4bae6bd3f8b1344651883c6d158432e36feb11b7a1083b2180558d2b87e1215515be20bf9ae0b1b9e760d8829dd402439e6aceb1fa1c681ef7e8ac15f7e2c49", 0x7d}, {&(0x7f0000000780)="19b0ccb29de094e2665361943575937b4eb0462a2b841ae2dfeed41f8bbaa96a366e6163f28a5ff66fcee229784d72d3e793a64d825d36eff7f7fd777e28560ae1da364cfa0ae3a6ccfdb7b2cb9d740d4728bc99423417206f5ac73300d0b58dc0c3917340936e29c82dc3951e89a88d58bdad54768533729d8d683833a7a903a2960c21d47009a8f6916e84c0f2e42cbb30e8f390194462bde4d63608c11fa6ae1ffa31029324dc6d", 0xa9}], 0x3, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r10, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17}}}], 0xe0, 0x24000000}}], 0x6, 0x40) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)="a0f424297b3aef702a5cc144c2e3ce1f9f27471e1467441d822ab4eeb6981b300bdd6d9c32e7329e2aae6c67b9673cb1572ee0238200b3bbbb1063924f920724991277e4efa63f34744e402ce217ef00b68530388bd61be2918f759ccdb611b8595c1cfb3a0fb7c952bee26cc6102ab7f1f3c7e45e5799a2ef7d7f9bfd86783a204af01059fcea1f667681beb20b5d18ebea6560ed575dc53d9deaf9d6f5212fb2c8c6197754f6", 0xa7}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000002a40)="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", 0x19c}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}], 0x50, 0x10}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000600)="b5e272d63c3e920f9d606585c7df48c1555e547eb80b494cad11a8c095815fdc29591fcb8fec59d47e93f5b319c37c5a8d5476e4c99a7a47b30913df0a05b3330da4fc3eba3846b6153b9c917a75f8be0673742addccca244b91c0c2b8a8de", 0x5f}, {&(0x7f0000000680)="92fdbfe94fbad3b9faefe2f386eeafe33825f58106b5db2804d117479305ec38c06a210f26017e175f9d446dce1cf856641d5f9f19151f02d4058fed0074cb33181582312223eae450079ca121dedee8ddc87899513f1f4bd5f544cbf09ded273142acb783b4bb16d32c7a5bb7d427f2d1c73b0a5e638d1d062e9a83e4ea580a5c2d7536f45f0f562cfc590017dfb83418a3680349825957d7d38c4eaa7b4422c9591c3eef7a5a738ab3542b7b6e0bf0268c39198d01c0f46872e6e078b40bc0a6ec9cb1fe04c67e9f83b20beaafebb343710da5acba55", 0xd7}, {&(0x7f0000002c00)="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", 0x162}, {&(0x7f0000000880)="8a4932772be4389c41c48098624f5ff14bf8a5b75a715cb6a7b1ffc86605c47a4e71158e76", 0x25}, {&(0x7f00000008c0)="ae2e46ea6df011de97217cc0d08fe812db94cd5a4e3c0a9e0d0350785d6cc402076dcd16a5b899c5067888d686316bb2caf5b35e9fd3d29708a8b3b992e92516b3e7a8e5bfcc158e8b1717591a4e25ea76888213b0c43a3e1f623f13451845dcfff759d3ad23dfe1a628c0440fc018927894d1e1b72c75ee67875b680c50f25c3cec8ec729853a96d05c71e27d33d60d72217a86c6bbba7d6f6f914e25", 0x9d}, {&(0x7f0000000980)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x88, 0x800}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1c0000000000000001000091204dac00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r16, @ANYRES32, @ANYRES32=r3], 0x58, 0x4000}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000021c0)="fde66a871c243c5f1161f9980ba7e59f4789185309eeee480b2fea35c83f04ee324f4b97efca3de6acae83f9f62b0df768a9da064ba71e10373782a95f9692a93b86", 0x42}, {&(0x7f0000002240)="cf4aa92ef0c0debea7af9943223247078660525fa8fb47a00762fdc6da359f0eb80065e270e75fcb1301950379f294287d887247b104039b89597996f4d9a265bb5dc8076901c2cd46f72947e077c356a90764d10b8d04c829c1256f04a4c733a880f79d0d27b9aeafb9abe44eb6caa5856cbe39d5a561e8efa0ea7b640af5859b640bb45723fcf5c53fd58c7a4a5f695785b575e71d9a1464020a4713c862ceb7628bef7b3a5348c9ce852b700f6a1bf19cf2d6b06664a7507b7f73f0742c507273fbd9e6dffe4602c65734", 0xcc}], 0x2, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x10}}], 0x30, 0x11}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)="412dc0d53130f6387fdef25db5a0b906041cac0bbc74c5b7703ac846d9711ddec4275b1952cfc3f8fbb962df3120f08b18f64651cacce4d55bfe0227ed65d39328700912d204a868173d11661497a9915afea5cf2eba00c0c3e72964636f754dfb886fbca0b0155c26efa390eb31a480fed6b8b4f0a987e8308e3aa04163fdfc6e445ecfed568652dd9c0c11491a7e32a89380af250a7d1775f392c081519a8213d1ca67cec89c8b4df4dfba75d08982106a5cae65b8d64a04ba386afb4d8c06440abe152431dc6025a83e135126f3d8ddd78eefd678d79cacf22bc6d7b67adb1451d2db87aab0b4171a", 0xea}, {&(0x7f0000000400)="e3c988833edb1b3fa60fba1128de6e87503212d9098a72179dad668c7cd14e39d4c10d9142b1236786d227825cc7b660abf377d1dfd1adcf20e8254e38e4bae6bd3f8b1344651883c6d158432e36feb11b7a1083b2180558d2b87e1215515be20bf9ae0b1b9e760d8829dd402439e6aceb1fa1c681ef7e8ac15f7e2c49", 0x7d}, {&(0x7f0000000780)="19b0ccb29de094e2665361943575937b4eb0462a2b841ae2dfeed41f8bbaa96a366e6163f28a5ff66fcee229784d72d3e793a64d825d36eff7f7fd777e28560ae1da364cfa0ae3a6ccfdb7b2cb9d740d4728bc99423417206f5ac73300d0b58dc0c3917340936e29c82dc3951e89a88d58bdad54768533729d8d683833a7a903a2960c21d47009a8f6916e84c0f2e42cbb30e8f390194462bde4d63608c11fa6ae1ffa31029324dc6d", 0xa9}], 0x3, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r10, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17}}}], 0xe0, 0x24000000}}], 0x6, 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r18, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) io_destroy(r18) 14:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r3}, 0x80) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r3, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r4, 0x0) (async) getresuid(&(0x7f0000002380), &(0x7f00000023c0)=0x0, &(0x7f0000002400)) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r6, r6) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r8 = dup2(r7, r7) ioctl$EVIOCSKEYCODE_V2(r8, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002440), &(0x7f00000024c0)=0x60) (async) r9 = getuid() (async) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r10, r10) (async) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r12 = dup2(r11, r11) ioctl$EVIOCSKEYCODE_V2(r12, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async) r13 = perf_event_open(&(0x7f0000002680)={0x3, 0x80, 0xff, 0x1f, 0x0, 0x1, 0x0, 0x7fffffffffffffff, 0x8d00, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x80, 0x39d, 0x4, 0x6, 0xd8, 0x7, 0x0, 0x0, 0x2f, 0x0, 0x6}, r0, 0xf, 0xffffffffffffffff, 0xa) (async) getresuid(&(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)=0x0) r15 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = pidfd_open(r15, 0x0) (async, rerun: 64) r17 = geteuid() (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)="a0f424297b3aef702a5cc144c2e3ce1f9f27471e1467441d822ab4eeb6981b300bdd6d9c32e7329e2aae6c67b9673cb1572ee0238200b3bbbb1063924f920724991277e4efa63f34744e402ce217ef00b68530388bd61be2918f759ccdb611b8595c1cfb3a0fb7c952bee26cc6102ab7f1f3c7e45e5799a2ef7d7f9bfd86783a204af01059fcea1f667681beb20b5d18ebea6560ed575dc53d9deaf9d6f5212fb2c8c6197754f6", 0xa7}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000002a40)="e22e50468ce59930d58b0d332f0b16a13900b711be12ab8661fc4a16d3aa1ad62236dc88f08eb7eee6fe6cd93802fced71a385ee3cf81c4c48b67e3fd3cd9bb052aaf0aa0f9e59d5d24311d033ea91b92ee6225e05249f498f5e05d14672781a590cd8f3e17fb13439aef53081c59c39e4a93f855b489505f13a60633b9249ef04000000a4f431c49f6477cfdc080000fc84375f974c32c56f7eba315805c71216edebf289505d98c09989e13867cc106dee194e126433a3261050891576c57486340771498d3880fe78248820942a815616cd8ece74b9db5f6904f52ad77cd5a0b16a8dfbe891aa3ac76069ca8af729ad041b471f42420baa537eb87e75523d4a68fdbd284aa243d59e2f21e70da1b05325003776c4214c2bc43703c684c4f3f072d5d2da2006ec91add81a6e35073bc5f5d06002a0000000da69467d3dc77bf798413726cfc81e298a9a695622be0819a905ba1775bbf0adc2d6fd29bc12ccb1aecafcf815347cbe66cbf70c3e1b9ea15af2d83b641da98efe001561a3dd9a4622e2a268a9f7856c536edd246407984e2bacd73484757b222c3a6e", 0x19c}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}], 0x50, 0x10}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000600)="b5e272d63c3e920f9d606585c7df48c1555e547eb80b494cad11a8c095815fdc29591fcb8fec59d47e93f5b319c37c5a8d5476e4c99a7a47b30913df0a05b3330da4fc3eba3846b6153b9c917a75f8be0673742addccca244b91c0c2b8a8de", 0x5f}, {&(0x7f0000000680)="92fdbfe94fbad3b9faefe2f386eeafe33825f58106b5db2804d117479305ec38c06a210f26017e175f9d446dce1cf856641d5f9f19151f02d4058fed0074cb33181582312223eae450079ca121dedee8ddc87899513f1f4bd5f544cbf09ded273142acb783b4bb16d32c7a5bb7d427f2d1c73b0a5e638d1d062e9a83e4ea580a5c2d7536f45f0f562cfc590017dfb83418a3680349825957d7d38c4eaa7b4422c9591c3eef7a5a738ab3542b7b6e0bf0268c39198d01c0f46872e6e078b40bc0a6ec9cb1fe04c67e9f83b20beaafebb343710da5acba55", 0xd7}, {&(0x7f0000002c00)="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", 0x162}, {&(0x7f0000000880)="8a4932772be4389c41c48098624f5ff14bf8a5b75a715cb6a7b1ffc86605c47a4e71158e76", 0x25}, {&(0x7f00000008c0)="ae2e46ea6df011de97217cc0d08fe812db94cd5a4e3c0a9e0d0350785d6cc402076dcd16a5b899c5067888d686316bb2caf5b35e9fd3d29708a8b3b992e92516b3e7a8e5bfcc158e8b1717591a4e25ea76888213b0c43a3e1f623f13451845dcfff759d3ad23dfe1a628c0440fc018927894d1e1b72c75ee67875b680c50f25c3cec8ec729853a96d05c71e27d33d60d72217a86c6bbba7d6f6f914e25", 0x9d}, {&(0x7f0000000980)="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", 0x1000}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x88, 0x800}}, {{&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1c0000000000000001000091204dac00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r16, @ANYRES32, @ANYRES32=r3], 0x58, 0x4000}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000021c0)="fde66a871c243c5f1161f9980ba7e59f4789185309eeee480b2fea35c83f04ee324f4b97efca3de6acae83f9f62b0df768a9da064ba71e10373782a95f9692a93b86", 0x42}, {&(0x7f0000002240)="cf4aa92ef0c0debea7af9943223247078660525fa8fb47a00762fdc6da359f0eb80065e270e75fcb1301950379f294287d887247b104039b89597996f4d9a265bb5dc8076901c2cd46f72947e077c356a90764d10b8d04c829c1256f04a4c733a880f79d0d27b9aeafb9abe44eb6caa5856cbe39d5a561e8efa0ea7b640af5859b640bb45723fcf5c53fd58c7a4a5f695785b575e71d9a1464020a4713c862ceb7628bef7b3a5348c9ce852b700f6a1bf19cf2d6b06664a7507b7f73f0742c507273fbd9e6dffe4602c65734", 0xcc}], 0x2, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}, @rights={{0x10}}], 0x30, 0x11}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)="412dc0d53130f6387fdef25db5a0b906041cac0bbc74c5b7703ac846d9711ddec4275b1952cfc3f8fbb962df3120f08b18f64651cacce4d55bfe0227ed65d39328700912d204a868173d11661497a9915afea5cf2eba00c0c3e72964636f754dfb886fbca0b0155c26efa390eb31a480fed6b8b4f0a987e8308e3aa04163fdfc6e445ecfed568652dd9c0c11491a7e32a89380af250a7d1775f392c081519a8213d1ca67cec89c8b4df4dfba75d08982106a5cae65b8d64a04ba386afb4d8c06440abe152431dc6025a83e135126f3d8ddd78eefd678d79cacf22bc6d7b67adb1451d2db87aab0b4171a", 0xea}, {&(0x7f0000000400)="e3c988833edb1b3fa60fba1128de6e87503212d9098a72179dad668c7cd14e39d4c10d9142b1236786d227825cc7b660abf377d1dfd1adcf20e8254e38e4bae6bd3f8b1344651883c6d158432e36feb11b7a1083b2180558d2b87e1215515be20bf9ae0b1b9e760d8829dd402439e6aceb1fa1c681ef7e8ac15f7e2c49", 0x7d}, {&(0x7f0000000780)="19b0ccb29de094e2665361943575937b4eb0462a2b841ae2dfeed41f8bbaa96a366e6163f28a5ff66fcee229784d72d3e793a64d825d36eff7f7fd777e28560ae1da364cfa0ae3a6ccfdb7b2cb9d740d4728bc99423417206f5ac73300d0b58dc0c3917340936e29c82dc3951e89a88d58bdad54768533729d8d683833a7a903a2960c21d47009a8f6916e84c0f2e42cbb30e8f390194462bde4d63608c11fa6ae1ffa31029324dc6d", 0xa9}], 0x3, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r10, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17}}}], 0xe0, 0x24000000}}], 0x6, 0x40) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) io_setup(0x40, &(0x7f0000000280)=0x0) (rerun: 64) io_pgetevents(r18, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) (async) io_destroy(r18) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r3}, 0x80) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r3, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() setrlimit(0x323538d64ab033f9, &(0x7f0000000000)={0x80, 0x40080000009}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r3, 0x5, 0x0, &(0x7f0000000140), 0x0, 0x0) io_destroy(r2) 14:42:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r3}, 0x80) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() setrlimit(0x323538d64ab033f9, &(0x7f0000000000)={0x80, 0x40080000009}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r3, 0x5, 0x0, &(0x7f0000000140), 0x0, 0x0) (async) io_destroy(r2) 14:42:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCSKEYCODE_V2(r3, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r3}, 0x80) socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() setrlimit(0x323538d64ab033f9, &(0x7f0000000000)={0x80, 0x40080000009}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r3, 0x5, 0x0, &(0x7f0000000140), 0x0, 0x0) io_destroy(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getpid() (async) setrlimit(0x323538d64ab033f9, &(0x7f0000000000)={0x80, 0x40080000009}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) io_setup(0x40, &(0x7f0000000280)) (async) io_setup(0x6, &(0x7f0000000040)) (async) io_pgetevents(r3, 0x5, 0x0, &(0x7f0000000140), 0x0, 0x0) (async) io_destroy(r2) (async) 14:42:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_destroy(r3) getgroups(0x2, &(0x7f0000003780)=[0x0, 0x0]) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r7 = dup2(r6, r6) ioctl$EVIOCSKEYCODE_V2(r7, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8) r9 = gettid() fstat(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r13 = dup2(r12, r12) ioctl$EVIOCSKEYCODE_V2(r13, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r14, r14) r15 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r16 = dup2(r15, r15) ioctl$EVIOCSKEYCODE_V2(r16, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', 0x1000, 0x2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001640)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000003c0)="e13a6d3d19ac4e0b5a26be4ee1330bceae663c4ec10ad0d93612597d42e344f6987081abc15d3d417367244ed87e190227c1a8c2db84b916a003c9fb1b936e51d742ddc8bcdabee80a539952e6416477f73d11ba5baaa59b10bd820d3c9f7bd7d0f8d869d32c9e", 0x67}], 0x1, 0x0, 0x0, 0x8044}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000004c0)="9960d515321c8e06b0b3cc08249ea2a12cee634d797e85caa3fb1be1732d319f9327e85d2f2f4a076f7ad3819495e09992fb816ea704a19ee17fcae9b076ae98c13a7015187bf4051f9189d72791719538bac7100acb6fbd240d11c9e5612499068312efccd3c46d16c343a189d914ee41df092fbc868e13b9a202929038454e1850f849153dcc8b4b99e6d66b237383", 0x90}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000600)="91ec7b9c14388bd04e007f88d8309bd475668984cca1f98145805fc9fc925814fb90e354c62569db6accea449d36b454203ff113d58398f09f8689cd5da110453f8be4fc516963c0b8cb1b722160b7647140a29c489acf878e4a9ba947f7fb34c231fe82f47de68cff8eb2f6967758994973705fa655593e3fbc669e8453530061020163137c227061472f025115a5081476ebd7a8f912c323bb2d68c1eff4279aabdefc507c6f82d0845a91077420585b508ef97f28c7ad434f75d31a413d01b5ecc6ef2fe3187afb9d774713cb2c4b196100731df2d5364c6ea82f978f469908", 0xe1}, {&(0x7f0000000700)="c768970f49b30c9089df5bb508fc7fed4be4ccb3abe7205c0354a0eb836bb91535cffe2ae620f16c94454bd3297207a4d77b7a917e87bc2de829ceb8961bf19debaedb66bf5f2caed456b81762ddc3ee23758ba62a2bd6ba1d", 0x59}, {&(0x7f0000000240)="d26222350a6df41a9c60e4c70ed1", 0xe}, {&(0x7f0000000780)="180afefe792a0b82944fd589c26480608dd411ee20dcac4f4b255991514a9486a87363faebbbf8475b385892a635daa68612eb36764e32a812e9051aa5b67025f1e5c5a0fc2c9d42566b51b42d665568cccb519b9dd5049ea50e941d580b49c718db6c4f06e9db136ae430a63990ae5e0b035a02a4c66a4e6f3dd82094c0c3cc58e8e1d1a210491a8ec45fa443fa765289dcd4", 0x93}, {&(0x7f0000000840)="b5cfde6a299d3f93e838ea0d7b4277de46a70bed7ca6a15b50bb288e09c473763d49e4a2e76c0d2010a9a778cbdf1a3122c4eca3045b601810413f354a4660558e80c067c55da5af5dcb50bdf3307ce720b5d7b025f7ea9484a2ae76a9c58f98ff29a1a97acd2b217cd6aa6d3a7ad1bbf25c0bb3b545e3b29b210fb41e378949790b021c280524", 0x87}, {&(0x7f0000000900)="ea11a1b2e8a2222daf1521ebea6646256afd398964c725c4319fd58e46fb5619979ae76ecf67eeb832df47a72aeaf6fb09ed372f04bce4685ec88db16b92d8960a6813ec6b25644e394f558b198dcd7ac69bd0e93693e86ac6617aa8fed3da21cf6ba9b05ce30627b50dc22c739521c5cdbcfb5df41371914a9016754a4b0fed3e6085cd0875ab70fd472b1892672e9416e65ef8b1f9afca029cf4f1c6fab6a04a210d318b20b98dbeb7bc29aa0fd6fc6f97a8aef7952cbf3b34b7cf87ab327142b2533d1b97a1fd28effe55a43fb8eb7da9845bc88b31d3c1673904529f9c81229bc28e924243", 0xe7}, {&(0x7f0000000a00)="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", 0xfe}, {&(0x7f0000000b00)="db60a35ac40f2b5f3504d08b2789", 0xe}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x38, 0x4000000}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000e00)="ab65062337b5e939b2ae85640eafbf6a9cd6749a7d5633eaee5d680828bc946215322ce447c84021dead6077a6a4811ec222150dbfa638bd31022e614a299d2e867503e2f34a313117ed91f4216ba904831b12b2d0c58b16439832d69f95893df960ec5e5d1b14e049fed1f5a7134cf900cc83a9384693430ef753895d190160d530016ae944a4801fd374e2912f64d0bf3897da565519438fefd88a9bb9a925f8fec99ca41797dd3ef62a8f260793536fef06e149a3", 0xb6}, {&(0x7f0000000ec0)="81770e2e438e328a96a01d5139a6c2120ee155608785de3cb764b2245e34817676d9c4eb31325922adb935bb8ea899a0920a90b212a2912051d2723545d7ce1272651e4ad3924f6042e3fdd4386fcf7070cb733f6ea2c3e69df377999b72259a4495847955d61a5d35b02d8e3db18723852954ba9f2003692e8c9e1b7c3b7475571ce94913fc6ed76db89147d6116d4681380076546960eedd7c5b5823d2084de4ddb37dd9938641e1238d8251b31bf84bc27454bb16d5fc4cda7fd6795283e018", 0xc1}, {&(0x7f0000000fc0)="0fd06579d814d056abf6d7e2121e77818ccb1d6b160be8f35edf2e8cc0dafea62abd07ef55f5b3fb0243e1f8f7273976f5168ab0bacc3638ab1df28ed1395d37673690a661b4484682bfe09e356cf1c72ade1900155da89592129ca5f6a6802fdfb086dc6dc9ab2430ecea847b00c421aea78fb52a6daeff01861cac8fe6a9e3f819914a960dfbfa0df6872d423855375e57d1fed5451bef6dc5afa4206a1c165f041afc6d892fe8903c73a2352a8fd50b9682be08e87178345d448c804cdefe7218165015b18f", 0xc7}, {&(0x7f00000010c0)="cb9ca60518f3e2a482ca963e8899c214a7909f32b4f1bb0b15c6f500b410425d85b7d348eb623d43305cb67ca0e4b63ca1796153eb31e91d2b0828312247179b313141905773482d93878fe5d3768f6827da117368a11fbb52936ff9fe322590f71b1eb5fb6a502f41220208c679861887792bcdc6ceff3210eb9d192a514d8b66f160c6e0718460375c290bed8fdac6cdd8f1bfc90ac88bb349028046ec3a13327019d937b093b070be734720013d747bda5c069b7dcbd3a08e7fc711c596dfc412d71f0cb1764c8880517857", 0xcd}, {&(0x7f00000011c0)="b708a4506799c590e1689ff29755952fd7bd8676cba39c3d41d26020ad8d1c12b2ea7cfa15c10864b830773da30020cefed69610fff1a10339672287e6d421f3df3d01c54fec863204c4ad9413c1099285175c127123947ef2b3b96c994f8367f7c94c58c2413958a1660ce30ade953d6026a2b50e8b52ed865a95c74d9e838c10884d2ad96b70b7050040212caa88fcafa81211eabd0b80a92f", 0x9a}, {&(0x7f0000001280)="22052edddcf9d133d4fed6702345908a182ca211d23c9f2281e5d52e5cc61cf0a4a4d06c7ea22f8ef042e9da0f71f9629886b2a9dff6694155d6e6f7ca54ea74a4cc689ff24a187f626e9ba0c6b4274222", 0x51}], 0x6, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r13, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r14, r1, r2, r16, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r17, r18}}}], 0xa0, 0x1}}], 0x4, 0x40804) 14:42:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) io_destroy(r3) (async) getgroups(0x2, &(0x7f0000003780)=[0x0, 0x0]) (async) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r7 = dup2(r6, r6) ioctl$EVIOCSKEYCODE_V2(r7, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8) r9 = gettid() (async) fstat(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) (async) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r13 = dup2(r12, r12) ioctl$EVIOCSKEYCODE_V2(r13, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r14, r14) (async) r15 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r16 = dup2(r15, r15) ioctl$EVIOCSKEYCODE_V2(r16, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) (async) statx(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', 0x1000, 0x2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001640)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000003c0)="e13a6d3d19ac4e0b5a26be4ee1330bceae663c4ec10ad0d93612597d42e344f6987081abc15d3d417367244ed87e190227c1a8c2db84b916a003c9fb1b936e51d742ddc8bcdabee80a539952e6416477f73d11ba5baaa59b10bd820d3c9f7bd7d0f8d869d32c9e", 0x67}], 0x1, 0x0, 0x0, 0x8044}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000004c0)="9960d515321c8e06b0b3cc08249ea2a12cee634d797e85caa3fb1be1732d319f9327e85d2f2f4a076f7ad3819495e09992fb816ea704a19ee17fcae9b076ae98c13a7015187bf4051f9189d72791719538bac7100acb6fbd240d11c9e5612499068312efccd3c46d16c343a189d914ee41df092fbc868e13b9a202929038454e1850f849153dcc8b4b99e6d66b237383", 0x90}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000600)="91ec7b9c14388bd04e007f88d8309bd475668984cca1f98145805fc9fc925814fb90e354c62569db6accea449d36b454203ff113d58398f09f8689cd5da110453f8be4fc516963c0b8cb1b722160b7647140a29c489acf878e4a9ba947f7fb34c231fe82f47de68cff8eb2f6967758994973705fa655593e3fbc669e8453530061020163137c227061472f025115a5081476ebd7a8f912c323bb2d68c1eff4279aabdefc507c6f82d0845a91077420585b508ef97f28c7ad434f75d31a413d01b5ecc6ef2fe3187afb9d774713cb2c4b196100731df2d5364c6ea82f978f469908", 0xe1}, {&(0x7f0000000700)="c768970f49b30c9089df5bb508fc7fed4be4ccb3abe7205c0354a0eb836bb91535cffe2ae620f16c94454bd3297207a4d77b7a917e87bc2de829ceb8961bf19debaedb66bf5f2caed456b81762ddc3ee23758ba62a2bd6ba1d", 0x59}, {&(0x7f0000000240)="d26222350a6df41a9c60e4c70ed1", 0xe}, {&(0x7f0000000780)="180afefe792a0b82944fd589c26480608dd411ee20dcac4f4b255991514a9486a87363faebbbf8475b385892a635daa68612eb36764e32a812e9051aa5b67025f1e5c5a0fc2c9d42566b51b42d665568cccb519b9dd5049ea50e941d580b49c718db6c4f06e9db136ae430a63990ae5e0b035a02a4c66a4e6f3dd82094c0c3cc58e8e1d1a210491a8ec45fa443fa765289dcd4", 0x93}, {&(0x7f0000000840)="b5cfde6a299d3f93e838ea0d7b4277de46a70bed7ca6a15b50bb288e09c473763d49e4a2e76c0d2010a9a778cbdf1a3122c4eca3045b601810413f354a4660558e80c067c55da5af5dcb50bdf3307ce720b5d7b025f7ea9484a2ae76a9c58f98ff29a1a97acd2b217cd6aa6d3a7ad1bbf25c0bb3b545e3b29b210fb41e378949790b021c280524", 0x87}, {&(0x7f0000000900)="ea11a1b2e8a2222daf1521ebea6646256afd398964c725c4319fd58e46fb5619979ae76ecf67eeb832df47a72aeaf6fb09ed372f04bce4685ec88db16b92d8960a6813ec6b25644e394f558b198dcd7ac69bd0e93693e86ac6617aa8fed3da21cf6ba9b05ce30627b50dc22c739521c5cdbcfb5df41371914a9016754a4b0fed3e6085cd0875ab70fd472b1892672e9416e65ef8b1f9afca029cf4f1c6fab6a04a210d318b20b98dbeb7bc29aa0fd6fc6f97a8aef7952cbf3b34b7cf87ab327142b2533d1b97a1fd28effe55a43fb8eb7da9845bc88b31d3c1673904529f9c81229bc28e924243", 0xe7}, {&(0x7f0000000a00)="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", 0xfe}, {&(0x7f0000000b00)="db60a35ac40f2b5f3504d08b2789", 0xe}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x38, 0x4000000}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000e00)="ab65062337b5e939b2ae85640eafbf6a9cd6749a7d5633eaee5d680828bc946215322ce447c84021dead6077a6a4811ec222150dbfa638bd31022e614a299d2e867503e2f34a313117ed91f4216ba904831b12b2d0c58b16439832d69f95893df960ec5e5d1b14e049fed1f5a7134cf900cc83a9384693430ef753895d190160d530016ae944a4801fd374e2912f64d0bf3897da565519438fefd88a9bb9a925f8fec99ca41797dd3ef62a8f260793536fef06e149a3", 0xb6}, {&(0x7f0000000ec0)="81770e2e438e328a96a01d5139a6c2120ee155608785de3cb764b2245e34817676d9c4eb31325922adb935bb8ea899a0920a90b212a2912051d2723545d7ce1272651e4ad3924f6042e3fdd4386fcf7070cb733f6ea2c3e69df377999b72259a4495847955d61a5d35b02d8e3db18723852954ba9f2003692e8c9e1b7c3b7475571ce94913fc6ed76db89147d6116d4681380076546960eedd7c5b5823d2084de4ddb37dd9938641e1238d8251b31bf84bc27454bb16d5fc4cda7fd6795283e018", 0xc1}, {&(0x7f0000000fc0)="0fd06579d814d056abf6d7e2121e77818ccb1d6b160be8f35edf2e8cc0dafea62abd07ef55f5b3fb0243e1f8f7273976f5168ab0bacc3638ab1df28ed1395d37673690a661b4484682bfe09e356cf1c72ade1900155da89592129ca5f6a6802fdfb086dc6dc9ab2430ecea847b00c421aea78fb52a6daeff01861cac8fe6a9e3f819914a960dfbfa0df6872d423855375e57d1fed5451bef6dc5afa4206a1c165f041afc6d892fe8903c73a2352a8fd50b9682be08e87178345d448c804cdefe7218165015b18f", 0xc7}, {&(0x7f00000010c0)="cb9ca60518f3e2a482ca963e8899c214a7909f32b4f1bb0b15c6f500b410425d85b7d348eb623d43305cb67ca0e4b63ca1796153eb31e91d2b0828312247179b313141905773482d93878fe5d3768f6827da117368a11fbb52936ff9fe322590f71b1eb5fb6a502f41220208c679861887792bcdc6ceff3210eb9d192a514d8b66f160c6e0718460375c290bed8fdac6cdd8f1bfc90ac88bb349028046ec3a13327019d937b093b070be734720013d747bda5c069b7dcbd3a08e7fc711c596dfc412d71f0cb1764c8880517857", 0xcd}, {&(0x7f00000011c0)="b708a4506799c590e1689ff29755952fd7bd8676cba39c3d41d26020ad8d1c12b2ea7cfa15c10864b830773da30020cefed69610fff1a10339672287e6d421f3df3d01c54fec863204c4ad9413c1099285175c127123947ef2b3b96c994f8367f7c94c58c2413958a1660ce30ade953d6026a2b50e8b52ed865a95c74d9e838c10884d2ad96b70b7050040212caa88fcafa81211eabd0b80a92f", 0x9a}, {&(0x7f0000001280)="22052edddcf9d133d4fed6702345908a182ca211d23c9f2281e5d52e5cc61cf0a4a4d06c7ea22f8ef042e9da0f71f9629886b2a9dff6694155d6e6f7ca54ea74a4cc689ff24a187f626e9ba0c6b4274222", 0x51}], 0x6, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r13, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r14, r1, r2, r16, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r17, r18}}}], 0xa0, 0x1}}], 0x4, 0x40804) 14:42:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async, rerun: 64) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) io_destroy(r3) (async) getgroups(0x2, &(0x7f0000003780)=[0x0, 0x0]) (async, rerun: 64) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (rerun: 64) r7 = dup2(r6, r6) ioctl$EVIOCSKEYCODE_V2(r7, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000d00), 0x8) (async) r9 = gettid() fstat(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) (async) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r13 = dup2(r12, r12) ioctl$EVIOCSKEYCODE_V2(r13, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async, rerun: 64) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (rerun: 64) dup2(r14, r14) (async) r15 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r16 = dup2(r15, r15) ioctl$EVIOCSKEYCODE_V2(r16, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000001440)='./file0\x00', 0x1000, 0x2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001640)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000003c0)="e13a6d3d19ac4e0b5a26be4ee1330bceae663c4ec10ad0d93612597d42e344f6987081abc15d3d417367244ed87e190227c1a8c2db84b916a003c9fb1b936e51d742ddc8bcdabee80a539952e6416477f73d11ba5baaa59b10bd820d3c9f7bd7d0f8d869d32c9e", 0x67}], 0x1, 0x0, 0x0, 0x8044}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000004c0)="9960d515321c8e06b0b3cc08249ea2a12cee634d797e85caa3fb1be1732d319f9327e85d2f2f4a076f7ad3819495e09992fb816ea704a19ee17fcae9b076ae98c13a7015187bf4051f9189d72791719538bac7100acb6fbd240d11c9e5612499068312efccd3c46d16c343a189d914ee41df092fbc868e13b9a202929038454e1850f849153dcc8b4b99e6d66b237383", 0x90}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000600)="91ec7b9c14388bd04e007f88d8309bd475668984cca1f98145805fc9fc925814fb90e354c62569db6accea449d36b454203ff113d58398f09f8689cd5da110453f8be4fc516963c0b8cb1b722160b7647140a29c489acf878e4a9ba947f7fb34c231fe82f47de68cff8eb2f6967758994973705fa655593e3fbc669e8453530061020163137c227061472f025115a5081476ebd7a8f912c323bb2d68c1eff4279aabdefc507c6f82d0845a91077420585b508ef97f28c7ad434f75d31a413d01b5ecc6ef2fe3187afb9d774713cb2c4b196100731df2d5364c6ea82f978f469908", 0xe1}, {&(0x7f0000000700)="c768970f49b30c9089df5bb508fc7fed4be4ccb3abe7205c0354a0eb836bb91535cffe2ae620f16c94454bd3297207a4d77b7a917e87bc2de829ceb8961bf19debaedb66bf5f2caed456b81762ddc3ee23758ba62a2bd6ba1d", 0x59}, {&(0x7f0000000240)="d26222350a6df41a9c60e4c70ed1", 0xe}, {&(0x7f0000000780)="180afefe792a0b82944fd589c26480608dd411ee20dcac4f4b255991514a9486a87363faebbbf8475b385892a635daa68612eb36764e32a812e9051aa5b67025f1e5c5a0fc2c9d42566b51b42d665568cccb519b9dd5049ea50e941d580b49c718db6c4f06e9db136ae430a63990ae5e0b035a02a4c66a4e6f3dd82094c0c3cc58e8e1d1a210491a8ec45fa443fa765289dcd4", 0x93}, {&(0x7f0000000840)="b5cfde6a299d3f93e838ea0d7b4277de46a70bed7ca6a15b50bb288e09c473763d49e4a2e76c0d2010a9a778cbdf1a3122c4eca3045b601810413f354a4660558e80c067c55da5af5dcb50bdf3307ce720b5d7b025f7ea9484a2ae76a9c58f98ff29a1a97acd2b217cd6aa6d3a7ad1bbf25c0bb3b545e3b29b210fb41e378949790b021c280524", 0x87}, {&(0x7f0000000900)="ea11a1b2e8a2222daf1521ebea6646256afd398964c725c4319fd58e46fb5619979ae76ecf67eeb832df47a72aeaf6fb09ed372f04bce4685ec88db16b92d8960a6813ec6b25644e394f558b198dcd7ac69bd0e93693e86ac6617aa8fed3da21cf6ba9b05ce30627b50dc22c739521c5cdbcfb5df41371914a9016754a4b0fed3e6085cd0875ab70fd472b1892672e9416e65ef8b1f9afca029cf4f1c6fab6a04a210d318b20b98dbeb7bc29aa0fd6fc6f97a8aef7952cbf3b34b7cf87ab327142b2533d1b97a1fd28effe55a43fb8eb7da9845bc88b31d3c1673904529f9c81229bc28e924243", 0xe7}, {&(0x7f0000000a00)="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", 0xfe}, {&(0x7f0000000b00)="db60a35ac40f2b5f3504d08b2789", 0xe}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x38, 0x4000000}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000e00)="ab65062337b5e939b2ae85640eafbf6a9cd6749a7d5633eaee5d680828bc946215322ce447c84021dead6077a6a4811ec222150dbfa638bd31022e614a299d2e867503e2f34a313117ed91f4216ba904831b12b2d0c58b16439832d69f95893df960ec5e5d1b14e049fed1f5a7134cf900cc83a9384693430ef753895d190160d530016ae944a4801fd374e2912f64d0bf3897da565519438fefd88a9bb9a925f8fec99ca41797dd3ef62a8f260793536fef06e149a3", 0xb6}, {&(0x7f0000000ec0)="81770e2e438e328a96a01d5139a6c2120ee155608785de3cb764b2245e34817676d9c4eb31325922adb935bb8ea899a0920a90b212a2912051d2723545d7ce1272651e4ad3924f6042e3fdd4386fcf7070cb733f6ea2c3e69df377999b72259a4495847955d61a5d35b02d8e3db18723852954ba9f2003692e8c9e1b7c3b7475571ce94913fc6ed76db89147d6116d4681380076546960eedd7c5b5823d2084de4ddb37dd9938641e1238d8251b31bf84bc27454bb16d5fc4cda7fd6795283e018", 0xc1}, {&(0x7f0000000fc0)="0fd06579d814d056abf6d7e2121e77818ccb1d6b160be8f35edf2e8cc0dafea62abd07ef55f5b3fb0243e1f8f7273976f5168ab0bacc3638ab1df28ed1395d37673690a661b4484682bfe09e356cf1c72ade1900155da89592129ca5f6a6802fdfb086dc6dc9ab2430ecea847b00c421aea78fb52a6daeff01861cac8fe6a9e3f819914a960dfbfa0df6872d423855375e57d1fed5451bef6dc5afa4206a1c165f041afc6d892fe8903c73a2352a8fd50b9682be08e87178345d448c804cdefe7218165015b18f", 0xc7}, {&(0x7f00000010c0)="cb9ca60518f3e2a482ca963e8899c214a7909f32b4f1bb0b15c6f500b410425d85b7d348eb623d43305cb67ca0e4b63ca1796153eb31e91d2b0828312247179b313141905773482d93878fe5d3768f6827da117368a11fbb52936ff9fe322590f71b1eb5fb6a502f41220208c679861887792bcdc6ceff3210eb9d192a514d8b66f160c6e0718460375c290bed8fdac6cdd8f1bfc90ac88bb349028046ec3a13327019d937b093b070be734720013d747bda5c069b7dcbd3a08e7fc711c596dfc412d71f0cb1764c8880517857", 0xcd}, {&(0x7f00000011c0)="b708a4506799c590e1689ff29755952fd7bd8676cba39c3d41d26020ad8d1c12b2ea7cfa15c10864b830773da30020cefed69610fff1a10339672287e6d421f3df3d01c54fec863204c4ad9413c1099285175c127123947ef2b3b96c994f8367f7c94c58c2413958a1660ce30ade953d6026a2b50e8b52ed865a95c74d9e838c10884d2ad96b70b7050040212caa88fcafa81211eabd0b80a92f", 0x9a}, {&(0x7f0000001280)="22052edddcf9d133d4fed6702345908a182ca211d23c9f2281e5d52e5cc61cf0a4a4d06c7ea22f8ef042e9da0f71f9629886b2a9dff6694155d6e6f7ca54ea74a4cc689ff24a187f626e9ba0c6b4274222", 0x51}], 0x6, &(0x7f0000001580)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r13, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r14, r1, r2, r16, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r17, r18}}}], 0xa0, 0x1}}], 0x4, 0x40804) 14:42:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001580), 0xc0000, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x800) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001640)='tasks\x00', 0x2, 0x0) getresgid(&(0x7f0000001680)=0x0, &(0x7f00000016c0), &(0x7f0000001700)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001780), 0x101000, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = getpgid(r0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r14) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r15, r15]) r16 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r16, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r18) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e9094f7c3c096182f981a44c4e25b3d621399c78a2c307ccb0c673c67e158c17bcbca8adc057699a0d1d2bc81274ae96ee7b74f246878f2b422b08c72bef8308e05fae7d6a46a3d2ee2dddc0192ab11b57d8d7c61813bc6a62322065b4c1ea89b4e73bde33efb5d5ef06b7f4ff66c2eec129d8900c7eaa02276ab69651cda9711b9c43bf15", 0x85}, {&(0x7f0000000380)="08b62270f669de04af61f2a063b4b92967ba408a4c3d8ee627473584dc584e04afeae779f2597eee2c2abe3deed4d8e221362cd222acd6cbf90205100a3dae7644112f5ccc44770572ae3d7c1f2521c9d19f", 0x52}, {&(0x7f0000000400)="3762421586a85078c46b24fedda1c844793ffaa44278f88e977f1fdcea72cc67dd033021a10134ecbed8e9b07865480df2ba6a78df7c2f31d9eacc30f73cb4d3575414c2ea6a87c4fd19b3a5d1e7496d7942a069817c0463058bf3ff4a3ea22c56e252baec86db83c92714b2fdb72060588a94c4a9d5d582a0c61782f0a42258883fc89f50d044ab17da82e670d2ee81da29c86754d622738cc90cfa6adda58fb3e9dde3bea0a2ed353440da672c91f1", 0xb0}, {&(0x7f00000004c0)="f914f50a9fd278b6fb2bf0b8a4f9110e272c62f0d05ee3b813a5bb77aedc741b5dfa77ef9486ab839f633bc1286f9fd1402d36a85e9c0ec3606c8cfe5d3ed5ece6d2", 0x42}, {&(0x7f0000000540)="6dd028af6d479c231bbaafb355fdd1ed8d8a58b84f67d571be839a16ece814a3c1897505e5952e9debd988166ffcb410ca545842cc52e922f02c25088fbecdf7430ae775dbfbcb384a383f831120b2cee536bfdfa5cf69815bc7a3a7a8ddbecfd7d8ceb32e8c56254326127c22c3a5137a45b9fc510fe4aa58c4d6d08d78c842", 0x80}], 0x5, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r2, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x158, 0x40}}, {{&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c40)="d042af618ef6f4a32c596cc5664b86ed1b07719bb1200b7aeec04ecddce28b3d446313b10e45c7d164e9463660fb014fbf72a377a9ef033ed1f841cd7c1caec3a3e5b729bef5873d10d253518b6871dcd448e1b8b1b1c98ba6344ac2dd0d260868effb9c46199591e755615f6143586b7330f64f163c7f2ecc479cf4bedd02f85e4ffff3bd5850fdf3e6bbe6e923d918785278da674519d75b66e7f24e4c586787ac44c2d0f424a5b851034beafd32c3235a7485e253ecc917253b2180ac62b676a51d30203b1f", 0xc7}, {&(0x7f0000000d40)="25f8bfa38cd03d7557a6998d468659e092e60006a890774a0568bcd2d8505026b2a8770830b43834b787bb7b9805d1422d9bd00d6047f1f8b3eebbf69ecd2cd6d325527746c0caba9ec52b94e44c850bfc21d4e15652a92b3b3b4b983363385bff68e63a09a8175bbf32c7c361fdf1f83cc43d97b43dfda357072745882ba639e95324fbb2d5443f91297786697d1f0395e9eee23497933cd328397f9983906db28418eeb40f3e987faa704a3b17fa376076549614d5ab98abccebf3ef4a472afa20d777e49245648f26d6789e4b736ffc92861131d15b25d1d30482e31b", 0xde}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="69306856af4d8c258454c5e18a42600f5360e4a4f5a6de8cb2bdf2c6c139314bc6351ef7fdf3a275e58b824e1b0fa6e81c963ecd97073275198c7278dd812112aa553fcf6cec55979d36c0a369eb1d204ba9573008d6da2efb87fbf67414bf279808302610026b8aa57cb02c9dbfb78dcec648003e8cfdb0a13ad8e630650c645d1dc35d51ad5a3d1f3eea13a1cac89618bbba98ce5a62b000f66359514c9d358ad734dd9785d5f027a3123b3b80bfbdc38317f3a01f206b2995d78bc8fc3575cf509e04d8844944fa8743de3b8f66a42bf97251498ef0371ba001416dc17255e6d3484f", 0xe4}, {&(0x7f0000000f80)="ee32c04389f7763c853b8878fc8e4d1b5db6ae1dc6c088fbf7ee05193cde8285ce0d894feecec0bb03edd12063f2f66721b66baa2740eb85b87ac791daf30be25dbb7f058ebb7f16334325841eebbb4bf272d9713e3404337f0094e9b7a8ff4d4b4c75f35a6b2bcd797a310283913de07a3c5587c4ee53e94fe46e03cbb5ea29c7f812ac3617f4c022de0fae4e57303d8b00d95bd5255d62435e0b3b9fa6d7194337fa1b6bcd316bb4f4d568c9c50d80328e70659dbb18d2f94b51f0", 0xbc}, {&(0x7f0000001040)="d5fab6d23991f52259fd7d7bd0e8cc537c73bd5479e6618ef8057e8e3eb6b8ccb405b8aea0d3ac9ddd8cc7797cd940231d7da832e2434721ca704c43543284115151340d993d05ab582693e3769f56379a4519d8f92cdc1b72ef5a7fc7092606d384dad5b2b3b0af6a2f8f8141ed6417021e519ef70273e6ae70122b6a9f0e6340a339b1a20a9d958299", 0x8a}, {&(0x7f0000001100)="3da7deffd2a802a900ae92f7fac5898a1344c133e93de5496dd0ba1665515cbaba8aad823067f181d608471037aae388b2d11e6264ce023712074f633cb0c812f9729377dc85ead96e6f483f8757fd07ac41f9a52217822777e5cc467fda9d", 0x5f}], 0x7, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x58, 0x84}}, {{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001300)="1f7025486ed6f88266df309adc22906a041c8ea5", 0x14}], 0x1, &(0x7f0000001880)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r2, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r8}}}, @rights={{0x2c, 0x1, 0x1, [r1, r9, 0xffffffffffffffff, r2, r1, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}], 0x110, 0x2004c850}}], 0x3, 0x8000) io_destroy(r3) 14:42:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) [ 385.178672][ T23] audit: type=1400 audit(1682347358.401:246): avc: denied { read } for pid=18144 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 385.201827][ T23] audit: type=1400 audit(1682347358.401:247): avc: denied { open } for pid=18144 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 14:42:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)) (async) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001580), 0xc0000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x800) (async) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x800) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001640)='tasks\x00', 0x2, 0x0) getresgid(&(0x7f0000001680)=0x0, &(0x7f00000016c0), &(0x7f0000001700)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001780), 0x101000, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = getpgid(r0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r14) (async) setuid(r14) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r15, r15]) r16 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r16, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r18) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e9094f7c3c096182f981a44c4e25b3d621399c78a2c307ccb0c673c67e158c17bcbca8adc057699a0d1d2bc81274ae96ee7b74f246878f2b422b08c72bef8308e05fae7d6a46a3d2ee2dddc0192ab11b57d8d7c61813bc6a62322065b4c1ea89b4e73bde33efb5d5ef06b7f4ff66c2eec129d8900c7eaa02276ab69651cda9711b9c43bf15", 0x85}, {&(0x7f0000000380)="08b62270f669de04af61f2a063b4b92967ba408a4c3d8ee627473584dc584e04afeae779f2597eee2c2abe3deed4d8e221362cd222acd6cbf90205100a3dae7644112f5ccc44770572ae3d7c1f2521c9d19f", 0x52}, {&(0x7f0000000400)="3762421586a85078c46b24fedda1c844793ffaa44278f88e977f1fdcea72cc67dd033021a10134ecbed8e9b07865480df2ba6a78df7c2f31d9eacc30f73cb4d3575414c2ea6a87c4fd19b3a5d1e7496d7942a069817c0463058bf3ff4a3ea22c56e252baec86db83c92714b2fdb72060588a94c4a9d5d582a0c61782f0a42258883fc89f50d044ab17da82e670d2ee81da29c86754d622738cc90cfa6adda58fb3e9dde3bea0a2ed353440da672c91f1", 0xb0}, {&(0x7f00000004c0)="f914f50a9fd278b6fb2bf0b8a4f9110e272c62f0d05ee3b813a5bb77aedc741b5dfa77ef9486ab839f633bc1286f9fd1402d36a85e9c0ec3606c8cfe5d3ed5ece6d2", 0x42}, {&(0x7f0000000540)="6dd028af6d479c231bbaafb355fdd1ed8d8a58b84f67d571be839a16ece814a3c1897505e5952e9debd988166ffcb410ca545842cc52e922f02c25088fbecdf7430ae775dbfbcb384a383f831120b2cee536bfdfa5cf69815bc7a3a7a8ddbecfd7d8ceb32e8c56254326127c22c3a5137a45b9fc510fe4aa58c4d6d08d78c842", 0x80}], 0x5, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r2, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x158, 0x40}}, {{&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c40)="d042af618ef6f4a32c596cc5664b86ed1b07719bb1200b7aeec04ecddce28b3d446313b10e45c7d164e9463660fb014fbf72a377a9ef033ed1f841cd7c1caec3a3e5b729bef5873d10d253518b6871dcd448e1b8b1b1c98ba6344ac2dd0d260868effb9c46199591e755615f6143586b7330f64f163c7f2ecc479cf4bedd02f85e4ffff3bd5850fdf3e6bbe6e923d918785278da674519d75b66e7f24e4c586787ac44c2d0f424a5b851034beafd32c3235a7485e253ecc917253b2180ac62b676a51d30203b1f", 0xc7}, {&(0x7f0000000d40)="25f8bfa38cd03d7557a6998d468659e092e60006a890774a0568bcd2d8505026b2a8770830b43834b787bb7b9805d1422d9bd00d6047f1f8b3eebbf69ecd2cd6d325527746c0caba9ec52b94e44c850bfc21d4e15652a92b3b3b4b983363385bff68e63a09a8175bbf32c7c361fdf1f83cc43d97b43dfda357072745882ba639e95324fbb2d5443f91297786697d1f0395e9eee23497933cd328397f9983906db28418eeb40f3e987faa704a3b17fa376076549614d5ab98abccebf3ef4a472afa20d777e49245648f26d6789e4b736ffc92861131d15b25d1d30482e31b", 0xde}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="69306856af4d8c258454c5e18a42600f5360e4a4f5a6de8cb2bdf2c6c139314bc6351ef7fdf3a275e58b824e1b0fa6e81c963ecd97073275198c7278dd812112aa553fcf6cec55979d36c0a369eb1d204ba9573008d6da2efb87fbf67414bf279808302610026b8aa57cb02c9dbfb78dcec648003e8cfdb0a13ad8e630650c645d1dc35d51ad5a3d1f3eea13a1cac89618bbba98ce5a62b000f66359514c9d358ad734dd9785d5f027a3123b3b80bfbdc38317f3a01f206b2995d78bc8fc3575cf509e04d8844944fa8743de3b8f66a42bf97251498ef0371ba001416dc17255e6d3484f", 0xe4}, {&(0x7f0000000f80)="ee32c04389f7763c853b8878fc8e4d1b5db6ae1dc6c088fbf7ee05193cde8285ce0d894feecec0bb03edd12063f2f66721b66baa2740eb85b87ac791daf30be25dbb7f058ebb7f16334325841eebbb4bf272d9713e3404337f0094e9b7a8ff4d4b4c75f35a6b2bcd797a310283913de07a3c5587c4ee53e94fe46e03cbb5ea29c7f812ac3617f4c022de0fae4e57303d8b00d95bd5255d62435e0b3b9fa6d7194337fa1b6bcd316bb4f4d568c9c50d80328e70659dbb18d2f94b51f0", 0xbc}, {&(0x7f0000001040)="d5fab6d23991f52259fd7d7bd0e8cc537c73bd5479e6618ef8057e8e3eb6b8ccb405b8aea0d3ac9ddd8cc7797cd940231d7da832e2434721ca704c43543284115151340d993d05ab582693e3769f56379a4519d8f92cdc1b72ef5a7fc7092606d384dad5b2b3b0af6a2f8f8141ed6417021e519ef70273e6ae70122b6a9f0e6340a339b1a20a9d958299", 0x8a}, {&(0x7f0000001100)="3da7deffd2a802a900ae92f7fac5898a1344c133e93de5496dd0ba1665515cbaba8aad823067f181d608471037aae388b2d11e6264ce023712074f633cb0c812f9729377dc85ead96e6f483f8757fd07ac41f9a52217822777e5cc467fda9d", 0x5f}], 0x7, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x58, 0x84}}, {{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001300)="1f7025486ed6f88266df309adc22906a041c8ea5", 0x14}], 0x1, &(0x7f0000001880)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r2, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r8}}}, @rights={{0x2c, 0x1, 0x1, [r1, r9, 0xffffffffffffffff, r2, r1, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}], 0x110, 0x2004c850}}], 0x3, 0x8000) io_destroy(r3) (async) io_destroy(r3) 14:42:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001580), 0xc0000, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x800) (async) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001640)='tasks\x00', 0x2, 0x0) getresgid(&(0x7f0000001680)=0x0, &(0x7f00000016c0), &(0x7f0000001700)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001780), 0x101000, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r12 = getpgid(r0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r14) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r15, r15]) (async) r16 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r16, 0x0) (async) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r18) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)="e9094f7c3c096182f981a44c4e25b3d621399c78a2c307ccb0c673c67e158c17bcbca8adc057699a0d1d2bc81274ae96ee7b74f246878f2b422b08c72bef8308e05fae7d6a46a3d2ee2dddc0192ab11b57d8d7c61813bc6a62322065b4c1ea89b4e73bde33efb5d5ef06b7f4ff66c2eec129d8900c7eaa02276ab69651cda9711b9c43bf15", 0x85}, {&(0x7f0000000380)="08b62270f669de04af61f2a063b4b92967ba408a4c3d8ee627473584dc584e04afeae779f2597eee2c2abe3deed4d8e221362cd222acd6cbf90205100a3dae7644112f5ccc44770572ae3d7c1f2521c9d19f", 0x52}, {&(0x7f0000000400)="3762421586a85078c46b24fedda1c844793ffaa44278f88e977f1fdcea72cc67dd033021a10134ecbed8e9b07865480df2ba6a78df7c2f31d9eacc30f73cb4d3575414c2ea6a87c4fd19b3a5d1e7496d7942a069817c0463058bf3ff4a3ea22c56e252baec86db83c92714b2fdb72060588a94c4a9d5d582a0c61782f0a42258883fc89f50d044ab17da82e670d2ee81da29c86754d622738cc90cfa6adda58fb3e9dde3bea0a2ed353440da672c91f1", 0xb0}, {&(0x7f00000004c0)="f914f50a9fd278b6fb2bf0b8a4f9110e272c62f0d05ee3b813a5bb77aedc741b5dfa77ef9486ab839f633bc1286f9fd1402d36a85e9c0ec3606c8cfe5d3ed5ece6d2", 0x42}, {&(0x7f0000000540)="6dd028af6d479c231bbaafb355fdd1ed8d8a58b84f67d571be839a16ece814a3c1897505e5952e9debd988166ffcb410ca545842cc52e922f02c25088fbecdf7430ae775dbfbcb384a383f831120b2cee536bfdfa5cf69815bc7a3a7a8ddbecfd7d8ceb32e8c56254326127c22c3a5137a45b9fc510fe4aa58c4d6d08d78c842", 0x80}], 0x5, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r2, r2, r2]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x158, 0x40}}, {{&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000c40)="d042af618ef6f4a32c596cc5664b86ed1b07719bb1200b7aeec04ecddce28b3d446313b10e45c7d164e9463660fb014fbf72a377a9ef033ed1f841cd7c1caec3a3e5b729bef5873d10d253518b6871dcd448e1b8b1b1c98ba6344ac2dd0d260868effb9c46199591e755615f6143586b7330f64f163c7f2ecc479cf4bedd02f85e4ffff3bd5850fdf3e6bbe6e923d918785278da674519d75b66e7f24e4c586787ac44c2d0f424a5b851034beafd32c3235a7485e253ecc917253b2180ac62b676a51d30203b1f", 0xc7}, {&(0x7f0000000d40)="25f8bfa38cd03d7557a6998d468659e092e60006a890774a0568bcd2d8505026b2a8770830b43834b787bb7b9805d1422d9bd00d6047f1f8b3eebbf69ecd2cd6d325527746c0caba9ec52b94e44c850bfc21d4e15652a92b3b3b4b983363385bff68e63a09a8175bbf32c7c361fdf1f83cc43d97b43dfda357072745882ba639e95324fbb2d5443f91297786697d1f0395e9eee23497933cd328397f9983906db28418eeb40f3e987faa704a3b17fa376076549614d5ab98abccebf3ef4a472afa20d777e49245648f26d6789e4b736ffc92861131d15b25d1d30482e31b", 0xde}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="69306856af4d8c258454c5e18a42600f5360e4a4f5a6de8cb2bdf2c6c139314bc6351ef7fdf3a275e58b824e1b0fa6e81c963ecd97073275198c7278dd812112aa553fcf6cec55979d36c0a369eb1d204ba9573008d6da2efb87fbf67414bf279808302610026b8aa57cb02c9dbfb78dcec648003e8cfdb0a13ad8e630650c645d1dc35d51ad5a3d1f3eea13a1cac89618bbba98ce5a62b000f66359514c9d358ad734dd9785d5f027a3123b3b80bfbdc38317f3a01f206b2995d78bc8fc3575cf509e04d8844944fa8743de3b8f66a42bf97251498ef0371ba001416dc17255e6d3484f", 0xe4}, {&(0x7f0000000f80)="ee32c04389f7763c853b8878fc8e4d1b5db6ae1dc6c088fbf7ee05193cde8285ce0d894feecec0bb03edd12063f2f66721b66baa2740eb85b87ac791daf30be25dbb7f058ebb7f16334325841eebbb4bf272d9713e3404337f0094e9b7a8ff4d4b4c75f35a6b2bcd797a310283913de07a3c5587c4ee53e94fe46e03cbb5ea29c7f812ac3617f4c022de0fae4e57303d8b00d95bd5255d62435e0b3b9fa6d7194337fa1b6bcd316bb4f4d568c9c50d80328e70659dbb18d2f94b51f0", 0xbc}, {&(0x7f0000001040)="d5fab6d23991f52259fd7d7bd0e8cc537c73bd5479e6618ef8057e8e3eb6b8ccb405b8aea0d3ac9ddd8cc7797cd940231d7da832e2434721ca704c43543284115151340d993d05ab582693e3769f56379a4519d8f92cdc1b72ef5a7fc7092606d384dad5b2b3b0af6a2f8f8141ed6417021e519ef70273e6ae70122b6a9f0e6340a339b1a20a9d958299", 0x8a}, {&(0x7f0000001100)="3da7deffd2a802a900ae92f7fac5898a1344c133e93de5496dd0ba1665515cbaba8aad823067f181d608471037aae388b2d11e6264ce023712074f633cb0c812f9729377dc85ead96e6f483f8757fd07ac41f9a52217822777e5cc467fda9d", 0x5f}], 0x7, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x58, 0x84}}, {{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001300)="1f7025486ed6f88266df309adc22906a041c8ea5", 0x14}], 0x1, &(0x7f0000001880)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r2, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r8}}}, @rights={{0x2c, 0x1, 0x1, [r1, r9, 0xffffffffffffffff, r2, r1, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}], 0x110, 0x2004c850}}], 0x3, 0x8000) (async) io_destroy(r3) 14:42:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r2) 14:42:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 14:42:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r2) 14:42:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 14:42:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 14:42:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) io_setup(0x40, &(0x7f0000000280)=0x0) (rerun: 64) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async, rerun: 32) io_destroy(r2) (rerun: 32) 14:42:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000440)={0x8400, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x26}, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/118, &(0x7f0000000400)=[r0], 0x1}, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r8, r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003c40), 0x10400, 0x0) r11 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r11, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="af53f4d527d0563fbf13e75e99ba25c8956c1b67a17c1f483568d589e5d14992640d504e2151c82468de007795b3870b291a5c254519e61fcc658912c9393807a2172adc0fd8601f0252bab645687737b4d0e6965e783031650990bffbfdec73fbcb928b3767346bb0413df1b3dd97972268c431dea6157712d076ad3b3af0763b081cbda2409787ea71d90d9df228952adc13ae9334aaf5", 0x98}, {&(0x7f0000001800)="544a631ad6c8c8cc3c35846ed7007c437ba61e14b085a6321dccf12da023fcc2155e50f3b13ecb9122f1e0a62c1ffc741d", 0x31}, {&(0x7f0000001840)="999c583d675c82f028f4af306c5f7e90998c3a7d6de5e604cd23c4df3ef8ef8a07e5eb095fcd97402767cf078413421bc7f17becbb18e9219727314e382d37423bab3c68993ac5c8f6700e159db1cd22ca3903583102a26b79046d175c10677c6540bddfc1dc10", 0x67}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="ea3ec0e0fd7aab889c7e4c36e43581cd8b190015155e8665a498d754a0a302cce732cbc0a73e1b500a6dc228c3598d90286c16d078e3c0fe6877e7038e18715496c4027f90ba518de539d206eb753cdcd9b7f6e2628cb7093cda092caa52069a279d4c5e4be15f32cdf151393f13f6f0dc942b73074d3555b36e12142a5c0de55b2a9c6ea77431a29fd9e25e3d5b91be6be146d28c8349afc447be079383828d9066714c62a924fb6617dd1a9977e78faf27d801f430c27dc1827b7db6bcea63edbbabf22d8d28cbc9f8434650a6c1792b9b87", 0xd3}, {&(0x7f00000029c0)="a9dac938ad31b39a02", 0x9}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="fce4e5ad25d90335e06ad221bc1e149d9792dfaabea597ea29bafde32a63361657faba954b0d28b5a199fd120806173351dd39532d7bdd3f61c2fe2e3f9cffd64292454cf99443d4fe0c43d7a7e597", 0x4f}], 0x9, &(0x7f0000003c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r10, r9]}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xa8, 0x20008040}}], 0x1, 0x4000000) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r13, r13) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r14, r14) r15 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r17 = dup2(r16, r16) ioctl$EVIOCSKEYCODE_V2(r17, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r17, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x140f, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xcc00) pidfd_open(r15, 0x0) sendmmsg$unix(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="818bb60c37b9c4012bcb3c645d9d3f522bdbd8fb14a78fcac1f94e0665ca8a1092e7b8d61eda8548e5084cb4ad1a7505a04f020b34581b23", 0x38}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}, @rights={{0x24, 0x1, 0x1, [r9, r12, r2, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee01}}}], 0x80, 0x1}}], 0x1, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r18, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r18) 14:42:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000440)={0x8400, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x26}, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/118, &(0x7f0000000400)=[r0], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000440)={0x8400, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x26}, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/118, &(0x7f0000000400)=[r0], 0x1}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r8, r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003c40), 0x10400, 0x0) r11 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r11, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000000740)="166a36066b3201c7a31a1ee4db3667dba7cc81bcce88234ce8d852df3ce39389c03f1ebb3715c351aad2b67ae96b1593408a1873fa80b2a462fdd9ab9a035ddc297042453c476b1a02746b54b10c8d6038e39930742cc9650f6e7cfa7b219f6e972c6941955d91886a909b801dc6feecf98986be1be220fd44288a78eb41e000e06db279bbf55a81929d3ee8ede36f2bf80aabaf1e61ba9dd0307a107ef6025c678febe27ee4bdde48b0f852898d281c34a20fb00cd604a90778c5e702eab60742ace271c1dc5c4188272ee4535b7f00ecd6cd888440e590f29b618c54e51a0fa8842677339a918e7a72041c18375f00d56dfc8b6b7ee94208e8993d4441fdf0d8615f01e046bdbf7054d2a6101fc024aa40b62720a0aae0578425d8cb8b84a1d31059ffed81b5709a2272a8084f3a585d62df8c9942d09b8305721aedd42170d699f98c37edcb375890f56f573df4b496d4f1ea0d4aa00fe888570ecc163e5645558125f9aa3b4dbc070afc34567ac72a3b415fe475680c2514142f27a49db0f19bee1f7c93b222be070a1a14802cb74fa75a66919be8dd932fd602037a79616602933f306a5a595a89ef707fe8fd6fed6d5fadb1131822ba327c1a20c82da557568ba9084f181d0e1bc7b2a2feb565ff650425a7a3c15322c5a765a908904a7911041bab4deab52454ec08386597bd048c12c19f43c21ae8d4616b9c88ae90fa5afaa2a557612eb8624fcf82979cadc500593c557dc5b6ea83456135d8f7dc8d6b94db3e57a21ac90ccfcadf3712cf6921f5d50a3cdef8b114d4bfcf9976d93f594abb8a5ee9f570edc4a5deb7b9eab4be5052083e3bc51a1c0d52b5844d0a1fccdb5c1d0e11432a066c334534f2e522c6124fad1df723250ee647e0c7e03b0748f77975a8c713dfdc8ffd9b3c37dd3a0a0ee89f2e37151f97b2a41e715d552791ed97aefcb5eb51ff83880e91dab2450033086cf9d06ac8d6846b911f57949b57aef40a429b83b355b39ae01eb5272fde15a78b284d5d469893b3f483ff96d3b2dec01a022453f161ad94481934895525c0237c65eabbe69e646afe3ac2ff4df06e91a55d220bcbe127eaf8c5a4e233090a0779a90168a77e4952ba399ede59a7721b18b1be4ddd186899bdb4d8e3b35bf4181b24e895b62b9823b0fa46ba538f99286f9cca586ab531edf62f994b473be4b63974a1f2de0a2a08e6dca7914c14bf3098c6fdac19edc21e7176a8f74ad5f4fbfdc8ef69c750df38becad5c5f57cc6ffd0638d924697b7ee971a1f3e9ee6d591bb46444b1952f67dd1bdad0d76349646d66b6690a515070ae21226f329197cfae14e0c9d74a80e509e4ce72008c7252cb2a7478c71d3d3b8c20ce681d0ddb7936a734fc197c785da3e7dcfa6c21dfd913a3e4b0b6450b3a834203a4e3d2d186f5b02dfb882c763b00fc27b9b8be865f18ed7bf4544d60ee452fca9af6cac9d20a4bd7fdd3e47fb47b3266afc39bfb2125691c60f836f31ec51709f9e435ecc19bfd905e113847e12a24eff52f5b7769f6606d90ceaa233d08848b84a466651386b32b6b32dcc21ce75a4bf94a641de8a0d9aa259542ed9ada0828a6c92a65014ad5e7ce82f5f4ff7f768533663dfb13252a0e2b975961abf70d1993fe7ea52d13caf5c3fa61a5787880ef45f98e9a15fefa53cb538ddf7d5348ba862cbc7869f84113081acb367bd8e2f1d45bf05769909f39136a4e1db538590320ae61a16d349aacb6c9b581ab37fa348eec9c8562d3b31862e9e26c52117755b0ab1d0069dc071536ba316f5d11a917662e02ac5c66c11ee30b706507141e975c19bbef0d2eb5e42881cc842a004aa9145071aa0a86340413333f1e1db66684d9adb4e663e3ba3ee0da81722267050067350221ee61ce42df643c019c62cd6d75478b6dbf30551c2c0aa4f0d320b4a47053bb5f7f6958e3e819454b71a931a86f29db04858330f024ad89e8194e73e61e31404c269c56cac590198f90daccf4c069257f8cd563b3699e40eb9cbb9b78bedce8013c26d0708c7f4d8084db622593b9b7d9fdad390971bbf63e6deb1db1df4768af71f6582bd496f6ed2d8333727671bb3007361f85c588683199a1e5b562887ad1ae737d73c11045246b2ce9fe2e6d49e591274807c9f8094a397dec483d23e4716dc092701f980aa20d7e44085a07b5d25a71479af62d9c656efbe29097e88c1eba37932eab35bef8104aceb2b6123bfae0b1bb202d8fbb8cc2059360f0fb8d9e0a07d86ae535d5cbf5647ab9f43a169927ae9fc9cb0bea6712889a771633ddda769cbc5960696b934602fb4fab3b2d8d69cb4156b7cc98f9c6a40fe17c0b150c39fe9f91f86b90a8bd20487dca442e01e8143ca4dbfde7fab9b5bab2242be09f75ed33047203b18de41137102d25320b87ef524bb359316a67df175b6ff7d7907ac7576eaec4a991186613b48b09bc79fa57de16aeda9be65c941876d8b47cce6531444b2d2efa1428a6bb79a3d13da7e57979316e32c5bdacec0c2ff7acf76fe49b7b135b57d786ad72386274f99c5e69aee39a8aeade767ae07018644a5f1f62e9aa6af5343b419dc7ff034f0999f94354d459f860b76a201a8f4d9f5297aece93ca2e0a0ffc0dae496b540c1e0be76a012d1f25269532dd9e8bd0e806e6630fe8cd72d54b60e18b312ff680d212db092c70d4db2cfd959380ac0fa01ce538139dcf5499e6eab6b03d38d99f30e188ffe43d807c79ddc31fb230afb2dc761c63b6571c09180f846d77133009af899fcfdaf95f1f270484bea8c5b773d884b164e0d33a64f8a4a303a98786853b0c6d13abc77c0c38bcb2df9c5c21f5cb45d3164112a3b6b86a2cb12998e8dffe33f993d8e4add97e0a96dfc41f7a569bd269cec5f9f5a0bbb34a990f019fe9af86e51d2da4fccf41963561cb3407b9dda91e44c1dac83171c80c09be62f69a1f8a5655827f7ff36d65d4f3737d518bb9db486cc0c8a57a4d9522871a18adbad93838c6069b9426135a358b8a819877e08f69a7fc714ca72fc8a2b111a6d5d89dd940d44783b3a061a0dfdd7dd1c7df0ce0dd12ac5b2c0a8a151de062335211dc07c5e9debdfce44573bccc539e39d51cceeb80c85f22b64245d3378a7c24e9c9659dbb03701217f38f121cf7ee3963e789f02c7c2459c88aca4a97a9f860e2a165ee7ca6479b070df26b57039af391aa47465bb34dbfd7ace169e3281a266613dd3de742f5fe919ea313d27bebbd04b09da9d6d6ed66b19afbfeb816e43caf98976a592101ad5ee2162b29b06a7197b14ff1bc648c53b178e2aeab758fcf017657936622d87992cd68249012253bbb06edff9799dd9c9eed819e7bbefd1132c951b0b1e5f236d8400b321e834a005aa2492cd44119f6fbfd99f7b7b3fcf682144ef9189b970c2785a64393313a0b2027bd4c3a8eb278e7dbb34e97dc7110d168f63421e6f6438cc1e445286fbfc2a4b97ad669b3fcc7fce05311f627a79a47e0f438fcadd774495b852371b36b543bd02c65868876456d88d50a534cfe6f0b86b2832c9d40ff86c6105dcb33a9988dd7d9797c4c0ad181f1c4b2988fed2a247323372a8943ba39b56ff12c13d7ccf2ec2040e44e5f0f069123008af5abe56c8e405d74c035fc8db62faa977dce58152449fc4b2c5b76a5f38529c4b146ffaca41e639d73d0989c7e2bc24af797759a57497de488c69f21fcea294e390b0539eef081c87c47b70a998461629b3943ad05232076abdba2f28b8a9431202323bfd187564a793de9388232fbb2fbbbb6d42b2283cae353d88def81aff1f627c42aaa8e12dea9fea5e65db0b6c2153e0cdabca162f4ea9c609111f46b6f311d6aabecf240ed054812db4715deac87b02f8ad74aac357dea8ea401fe3645188943f20510f0bd1a3c26b71e68b2882504cd7bfc53c52f77b95b899bd3f0c00e85bb7495adb3582a38ff16f5ae811636c9c246f36eb3ff89ac0a0c7f88978b9848b1866889eb44646076f285b33008793f1fccf68e6cd9a92a0e774800b7448feeb0f97b12c6a282b76274986eec2d6fb4d899e3ea7a26eb23b8357dd81eea551e0d99679530b0da77683dd510cc9529f61fb5c798c768a5d2f94206883c7846d7d8ec346f7c4188492a8508a6b444ab91bad50fc343bad6dcff522b30de7132bacd2d3bce88a6936ce695f61421c22731d2cb18aa15acac468d9377fc2c65cf2660d63c7d6348e72164a09c4402fea941681ce509c681f6fc4410754ecd82998e4233c9d06347cc8a12144a4581677f23b97bbf414b8f6f8323f26a5d008f0945e636722075bc25cb462d7de10c508fc12a74ff6c076744f235df6a17a4a8bdd101a33b2c6b61d70df5659192fa4ae6fc7491a2ce1063caa9cdffd790167d06e83a968f79bb0a2aa8a0c487a5dbeafe286c88d2f48f12bd643954495b077c1a89d94bcd2b15037aa55d7da56f0432b22210e9c9a8798f1fd98df950e5abb2411f62ae06251d979ea260bf71b12faa36aeed0d2630baa8ad0eef2e1a227b658b9b4e6ef37360b79b6f696d8ded8bd608b8452476a9a3117d329ee3801f526acd2c6bc1cbaa7291e453512717d96ec79f02c375f95cf40f248a13f03b20852311cd0139a44b443fbfe034c6436101b94e40627d565d9b569b9507f1a5ea47879f335e63f9c22ff57e157971b3112f15cd161092e7d5156058865c5811e9403d6dfa6d176730491cbf67cd8ce548c42c68dd5be8fde751d95c55a1f753c7d812d42aee89a2a37b2aafe160dc688a183b81c46436fa54a922c386224ca88875da70a9acf236964cb95bac7b3f02ca613e35dcd0dcba812a9ebf84a1dd064ceaac7b73a87973b4ecddef96dc13bc90fe24f150ec592c730eb6c1ad29b8b038f5bf88f7a8681ffce34d600f83878cf65fdb1a643522496d9a5beb53a4d745acc7d0f40641bcb9b76a7d88d56064045cb48c50dce2335a83032874eda567bf4441a59f67ef07d5759e7c585f1f2ca6ff7520b4dca2010ce8061b0caf42500721d234741b7d9e3bef043eb3823afe05c7bc6eb9720e770e1f7ecc4c0bb8f17ddf86ee3c2dec4d004b2e0c91bd36f8ac14d7e98ed60752112dc24018f38832cbb2cb5daabb1125b9612f2e536e79ec4ce53f57468d969ddafe32eabdc3e3db3969191171680ad6577010cefe09a3a02da4d8f5abab2e9c6e3dfd91bb817be556a7732f0f47700bf915e2f1aca4ea336ff097d198f0055b378428b787ad96a3a3c31df50d2bf76bd2d78d395f6271a16e8c13f3e7f5707b5caf0f90a19963cce284726a64f3bff25d5e7114f138d15a4649df8a0304f01b5523368a5716deb159a01ef5abb37af868682aa1cae59d2718defe88548c751538901e4b8b477d295f226500cbf33b95747dafa18a761cd04d8307eafcc93fe437def071615275cb1d6832899b2543ca1170a1632f9d32c0cadca715f10f93d599f45a4296a5bd62293147e9b6801fbb9d656d82304dc9dba3dd7c19ae0d38677344b7cac36b601fd6946cde9a94e1905ffaf3a100374596fc587ed627920ae2ab7ce069555a61c5896de246f018b285dcb75abd09891e613e1ac3ebfc6b207df35aff3f574eac4e0b48136bfc7779b80eb2aec898f889ff2dcc0e9fc96162f1c07c0a40bf81af1a39d46694ad84f7b711a9686b3d2cd8669743c2a84735d06a7377fd2099a305d79720e65afdbb8e63c042011611232a9b5247c50056881ca76b772eec4ee49e4d501e9e877ffce495121bdd7e5b0edefa2faf0d7f64f125750", 0x1000}, {&(0x7f0000001740)="af53f4d527d0563fbf13e75e99ba25c8956c1b67a17c1f483568d589e5d14992640d504e2151c82468de007795b3870b291a5c254519e61fcc658912c9393807a2172adc0fd8601f0252bab645687737b4d0e6965e783031650990bffbfdec73fbcb928b3767346bb0413df1b3dd97972268c431dea6157712d076ad3b3af0763b081cbda2409787ea71d90d9df228952adc13ae9334aaf5", 0x98}, {&(0x7f0000001800)="544a631ad6c8c8cc3c35846ed7007c437ba61e14b085a6321dccf12da023fcc2155e50f3b13ecb9122f1e0a62c1ffc741d", 0x31}, {&(0x7f0000001840)="999c583d675c82f028f4af306c5f7e90998c3a7d6de5e604cd23c4df3ef8ef8a07e5eb095fcd97402767cf078413421bc7f17becbb18e9219727314e382d37423bab3c68993ac5c8f6700e159db1cd22ca3903583102a26b79046d175c10677c6540bddfc1dc10", 0x67}, {&(0x7f00000018c0)="3030540097983fc0a0edf2176b6af2dfff1fe159a33350ae04e52eb43f5710eb9650fe34346f8d4cdb2c976de1a0cae4b94532d605131f6dcef79e3801d9937caa7f9791f881c0027d3fe7c4f225b0df13cb30839112137b17a5d6fb7a013168bdf75141e86ed5cce0dd1018da01939feeb33654fa9e2ad93c223b02bd71d150212b6e327524a9052cc38bb4aa159da1af2520e1d4fcc449cfb2a4039e1f66f3d103545348fa5c0e861c1e1cdeb9b0f06c4ab1578a6a192815da6f49a5d0006439f4fb46b9939600ffddacfd13008affb64a789eaac8cf9abf0255305414a50a8538f66fad0a4cd6dc9ae10c492a78d128f551a2d2de84dd6cac0d567ff271e186388e138256405489a2b5c2c5f8b14d3b798176be6f7df0ad9090ec07436041f2576f12463be3a4a3d90dff0a7f1624d3f5eab859fc05fa6843ce148c2ad632b9432a032097772cbd1d19f0002541727c21144a1804abdb5fa38401ab12f1166926956abb99b52ba5f3b5af5c99048422733cb9b82023a5b2773b89480c679c30adae33406d99f66bc859a2362921128e12de4bca0d4711ca5da132c921286d185c605ad14a37cc658d55e49b2509d7ccdfa1477cde24382135b052c6d4584921c19515726033e2f45110f3b87dd07da7b59a195a69193d331ca99d2bb42486c1cca9c9925c079a2be2f436d68133a27fa2d0fcd647a7a41344f764fc711f27029454d0326b6bbf5ad991f35a4c1536c0c4317d9e8a3b2c5de9704c03ec608055bf8dc4918561f9dd68a9790e9e6b92902a85a75582e7200c3c13d2c801ef253971a6b7db243608529946707f062f44491653927f86d7350c7ef929294e9271a2d122abe358c44cc951bbf06b9df2f0354a7f389d0c47b910d4a8f5066c859bd420a87129466cffd24ae41c2a13f020e26284b4475fdb68ed0a005b7bcaa5cc9125a3d7cd8b0fc550b22294577a013c3948dff26ce4c54e723c88cfe6cd8dc6cf1e2089b551aa0416324e8a545a7447fd58158fb39d3970042f54ce6589cef2a816e7103e046f4500bed054b3c856d3ace2ad7dc657a6d74dcfe692563d7405a6d4f519f733552ec13161d51dac618c72b3ecdf3a4c948099ca2337c45ab04f2abc0aea11348a3b090ae7844d8dec17cace5e378c611f20fb3399fd8eb4a9f0ca879a32b2a258c4baee485cfd40d2181b8a1378965f01a2b460efc563f1e7b57dd829d6e9c0da61d8c141be22db9bcdeb2448e01a604971dc593ec234cbdfe448a45dc67481b0ea931ed3b3741d905990bfd8016e2f40d443a05e71470145aa630d66a44cbf8c988507fa0181bd3c22eda670bcdb78666f68d5b3cda649906a62ceb39b8b22106b4227ece469ea51af3a0cd7d9aad9f75d7b51bb9796bbf6a4f4ab8c56fc4d93a5385ed28bf7879c5c048762b21d86153aa2a2f19a75db366f2f0d3c7fc8fd240b64a2b481b75f1441e4471b71f71b6c7764728428a976f5824d07c85f3f6e2e89d2aabedbb595d85804c5d665542a71bd58b3a713397114ade37498f19494fc4b02ef696f7fc25629939b84707959476c09b15244ce1d68d4ac705b45e4011e5c7b465449127927a879ae55c76025ed384b490e45ab835bf18d78e8da667c5926da86d34c61a05d700ecd4cb3485ca2bd27a7f09cb46443c9ca3676b426a437936e8911de7776458fc0b7a0e62a23f498177e31244f142edff410525315a0c42fc023c61e6b983ac5b5e20751a8d3db203fea1df350ee8525cfe27d012016d8caa7606ee6aa86dbd907795fd3b5d8b581af39b94d559c532e82a85f2f3d2c4b66ecc436491477186fb70fffa9638d4c9648ed719a4e4426e46005d1d1c3a11f82a9b2fcd8821dbdf3da63967cfc79de32b8277823658387816febd51469c46f727c29075bdb8f44c09091f15e483a6b491ae882c0acf4c7fcfd88b47ba4cf87099d6a8770f02fa9da88994f96917982b8269e7e18a4c3c85164849966fceb61f74233cd5cd2979a26bfecaf743b869c5559738361000b9128f7a9fffe55a0205dac6f03eedc877c5e54ddaf0c132846ecf35d4e74cf5f2bc367ea8e89a70585cd5a593d53ffebe11a033cf16db35e11a189ffe6fbea4a7d826a13a87bd259be6e3f139e9110e14716e4a8e4eb3060eb1b6a05d2b5e7ef303fe66e1dab9241703a88a93a3b0b92bf41d4f2643ba8a49bb43c9f92dc92a5e27a3d6bab8bcb73f98ebe34d2da849ff461f037df7baabafe9bd46549929379c2b29e66b993c9901e17918bb26fab02e08c08d29ef29a7fff11146dc37d3711fe74cdcc11b95b6c46cfebcf6a3920c135ac4419faab961046eb7b229231e6e6b2f7e251f88e04bf025562e47a33ad7d1ccc173aeaee916da9b9aae94606cde7457e9a57de440837d19f44c3e30224573524c37c1979579d0d290fffb4d20b455b29ceaf22940e3284c23347a761edf707a572bcb2efaf943dd116699ee8d75bdc6f92eb1657e90c85ec275c4b489b48ba8c50b6c6f1d87516e5152faf52f553aa114c5b5d0b8f67f35aa47be4492b2d7ef1f7865548cf87da88b9b9ce8a4f3a71b35226457adb6cd35cd703befd75cd6b985d44bc535fa7943979db2823c90ac5c4436d39ff928384a6fb434bf4196f52ca2bfe3a6f6c7f11cd504ad9070cff3062346801db1fe6e6ecd64ab6d8f44f81b683cd757547a8038ebd5d69b87e46a595b115eabd4db693ef9e77fa144fa4d98d5b79cdf508e3f2bb7cda08e0b734fe8bb8ec4f53b300e025e3b145219612a7d5108bb5267e7480ec88c68390f7eb5433ac77f7be48dfa6ab94966fa502b520e4c21d45b30d90ebaa61b1604c24b5486c290b23aeda108b7f04e4c5717f71819c5c426051dd8562de60abbe4c542c70b23550b51c92f9d2c255191e8cd972b1ffeefc687033d654e7b8f3f0b4a957f0e5db8510fd4d555535e1f60dce76315474ef4393f9d9ed0e5d5bbefea847f250d5ab05c08eac1d15d44c176d38041120aa6d2858695f7e9fefaccdf932e34aae383949aaccb0dcb999778b85e49acc41055599a3aa7fbb9a238c6827497ed7cabe212e5941e94136c1c38f38ee5872a795cd909095774b516755e80a8e8d115678f4140d978526fa83462e4ab4e298c1075d56dfead3b312f493a72f7c33948675a121451193c4436cbbf200a3512c97984ca6228ece8fcb21cd26c7558cb4ad0235bbac4a730fe54d8fdce40dc940815fa713fab41c84ca36694aeb9358c5f01bf33a866988af24a6a143aee2a48950332e4fc90db99f22e1c109ec29d1359b80ae119176a3b799872f6054ddabb1fc62a28d74bf918a266b9e80dee42952a0e65f069a7d065ed935b9a7079af0027ea08c71f79803c3032b04fb6a638cae226d06ca33e8d153d8446b90172560623ba5bf8e9179548b6572534616d51e0b7f932b9b147f17531871264a659c16e96f2703dd82b8e87d7ab09debb302f81d37eb03068f2218fcf24daaa0dc24fddfdc82762e83791696f44bce1f3657b312faf56f5f31fed0b99fe83f4a7f24cbb44b0a4317968db9965301ca24ab7ee9f7c249ad37646f44617f6999c73a16fa6642087c03b0b42d66cb612898bc9c42c8cc3a4cf767adb5fca9ade8ae6b81a5ff9a00a7a96104dd099cad6d24d3a5cef8bcfdab260d12ec604ab77831afeedff11a5d9df4c59e078e62fb388fac7993f31e266ec63c4fcf1d092a5064f15e55aaeefc28bf577802683c39e077f45bc661b5b3f0418d8991d6865945228743d53ead116a6e3b66bf253b90375b44c07c5048162bcf8bdfcfa9c0476960148c06727f6fd6bf94ed6c25b0743024f3ad8f67be1a2cc46c2ed6fd52c6c70b24b71319c8a4145c70efa0b8eb9e1ba4d3c06eac1815cb20fb3456cf306bd65403d023f418508f130ab1b96adc2c516693fefb95736c389c587fcef0581691031203f1918d90d93eccdbbb96c9d452a455c82850de361d899a35db28e91190734c9f3403cf29902be13a61c7f13d54172a9f162c753c22ecbbf4c92176579f6ec825d2659109a4cdb4dba2b88217dd3f873ba38cf44f184a3e38aeeddbf1d71d9d76ba1553c539687b59d3995473743bf7492345c5e236ae29e028270fde7d8e5a98e41794e303ba4e4728b4b84863314c597970be5c23fbe5de1e59ad6af08c39ef7278b3eba49f8e1d69f5155fc748443ddfa658df75713c9b4b455a6a1b37bfe4b00e074b8c235c70f2da2956c2316eb1663687ce6f4745414379fc572e32c93322a951d7a45c9a4fc0bb4283b2ec2922dba38743eba3922104d2dc0277b703aae76bbc774abb5540fd48a0f60244050b21297c91976861e5d8ade474752ec853a805d25565a103b0cbcf74b831c6cb00b22ff93e89c22ab2f301b03087d43bf6546136b853b87a758b1c22417c4aedb21d94ae3e40083df93d21221bdf185681a1e5947052c9ff6c9e7a4f048a94b9e03e864fa0bca11630557d463c21e0bc9c49be466d8c97b306eac4d47d0350332891a1153f0910cc3ba7726b3079121f2b4a93ce5c50e89aed6c8054e5f99d06cde3909e21b1e1ee5e3b732065c3b9a69ae7cea3819fcdea3f03887f3be21093854565c2f88c1aadee4678336f784a7543ef1448f23daaae05677e0934b273f345846bc07da72f3c69f98002abe4c6792f955b125e038090fe46b5460d276a649211a685e93bb6e92b3e4f0f670127fb1925e9ce91ed0758029dc44cff1849ee36ffc01a9d7560d55980fc3b4b0c3596eff4ca7f89529373e41cd02d01971bd2368bc8ce6f55ac384965e432b3448f4edf43ab25887d0de4f99006f674c035e07fd17f1cb1f9edfeda95888bdf78d633eee30db0dfcc9edb77f847ba9b534c80d2c8bffa685a478c7c27601b74ebcb76058e22aab90dbdec6ff4298a496f014dc3b73fe3e7a78f2049da48722c039713c0e23756d88a2d3ac2f78fe695a1ba03cae0adb0da30c8ad12671366fcca3ca8789dd948c5b2db61d5a2fec196a0c4a3efb4ae716bee2289cd5e14e8fac1ec6366be3856651c354da55f0edfcaf3280358d6ed3b87cf401bdc44a11f6244e64e14a019f1120d9827dc0668a5d29970d8624fadb83dd832489b7b9a1b7b32e17d11e05198bffa10af9514c37fed37365772927c0e6a2ce4b478b6f9d2a5b89ac6b9a1483f182aaaed359205db35f74a9a6f08c03cbcf1def2bca7747a6ba288888884a4d58152fc9ecaa90940bda643d6e51ddd4c3aa1f650ce79a877426f8e42d534ff774d20d4bc189849a198bfd97d949a3c60ebc14bb72a9016456a61c682eea84caf36b0a6fcbec42a4dfcc1bd77524632d81379a15d903f3ecc08765e574c88261a3d71e3ce98d63c90694dfd643a19b21952d57f1608480e2e3aa8c0f0ee82830bc153890ff54db3fae297c7b947f65d5908460b9389198074a3839ac3eb26796fda54b9801f64c3dd0172d86c947a62117e2cba866d5439d71e1c0fb3c876979ff5e88737af1a85cecdee2626017ca0ce3fef367aa916176e63b3b166eccea4da11eabde3fb2dfc06fa101d2cd86027327bcf14d62b85a16ddd5cf363c059d65129c449e09081f37492b491bf87499f424be128561ec6e5544df23c32cbb09c669fcd15da6d9ea6a90f5e41c5ce9d026eccfa591d21fdcbfde6270db8c13fc0c5def8a6454730868a059f4245546ec5fda923af8191474f0ac5d3f4ab5b60f711a4b1551956d7fad91f55f731200b828f7484fe60f6f9f2b17c35c403f25cc46b2710c2ee0a31d3579e3bf683a72d666ab3", 0x1000}, {&(0x7f00000028c0)="ea3ec0e0fd7aab889c7e4c36e43581cd8b190015155e8665a498d754a0a302cce732cbc0a73e1b500a6dc228c3598d90286c16d078e3c0fe6877e7038e18715496c4027f90ba518de539d206eb753cdcd9b7f6e2628cb7093cda092caa52069a279d4c5e4be15f32cdf151393f13f6f0dc942b73074d3555b36e12142a5c0de55b2a9c6ea77431a29fd9e25e3d5b91be6be146d28c8349afc447be079383828d9066714c62a924fb6617dd1a9977e78faf27d801f430c27dc1827b7db6bcea63edbbabf22d8d28cbc9f8434650a6c1792b9b87", 0xd3}, {&(0x7f00000029c0)="a9dac938ad31b39a02", 0x9}, {&(0x7f0000002a00)="4f3c49ad98cc652083d0b0494116f93f9a8b7055b3589e2fbdaf2d72c7ec7e21763db864bee52cf3dd9c1b5a4d3297148cbca1bbf1fdcfce565faf8593110dcae5098c74b6d3edcbb314c584729aa324c3340ea5a25569bc8715fe427096d9379b507938d3ae81eb83a956172867a249bee516587398834293da4df609c5f5592c9966fd50a230b64ae48164d225ffeb7a4ed1234ef3ac3003d066fa996445166b4a901600fdcb4b0d07fcb294bcffe0f96a5dce9a331e40a7214d73d53ad58350aa863de9367d6922cff251667eba8d6c6c5c7fd6fc5b8e4958eaad4d13155195b55de79483d798d4a541ff9c7be4e1303ea7bf4db014683a8e2879fce04010efd4ffed3b748a669f4cffc9756fc339a75e9a8a736769678e50ca09666313c43c81b27e0e75975ef49ba7d4b80e1d05ac7cddfbaa1254f2f186bfcadbdf7ae71f518f96664c5dc6e0fa11059ee9e907a4045e83a5d7df705a2799c4e4689395d53f6ad2a895b12d28ae26c0307bc7ac8e3a8c6fbc7adce75636facaeb12a56329bb5fc1e00f17d0787710cec495def56f42f8ed62f43a070aea888430ba57caac218cec7358606f58c629f38ac2d15be7e42d50156975b34e9c1f6d072a8102608924af5b806df14792978950aff2cb65b3373d4726108796cd21f8eb8e1b07ecb74dbbb2a3eeadc8886be09e2aa740c59c02923c47f1e9acff024ee5f8a58050d7b2d861ed89f7c777eab93767c187e37c58499c00bc486d33cf815606d534850a08bf86d97e468228c7b198168aecc531b175fbcff713dbaa579237a5cac8f7d90a05c6740b9838412c8144067a01f4cf5a397030850af89495132930e73944edb2f74f0af762410a71dadbdda82e2145951d2b47c56edd5621edacaf9c3eea479f4b55e96eb983719148fd82273120cb7651bfafde6e3028fda4e0d15fc3fefbb6aec150c0ed1cd06efa1ed3de1affbac72f42dc15e88456099a8964f96cac601c00ff9654f85ca5b448d4aa743fe776e19748dfc200cc9488a04f45091e65ccb088df77dc5b6b1731f41eea799656bddb9bae5ed4f17d2e830545e340138b55b303900893fff0a9b1960be4d99feaada64d0c802e301814ebc0f40ceb123169b9417f1a69df1860843600119342a1e189debce268c79f6cd514c5ad6820a1231946f8d267ccb81daaf40d1b86fa079e9957b5dbdc462660ba296185176ad6f3bc96aefb962556f75d0a82ec698f98df78255eb87186b20c14d83defa2e5afd3c3a392c2a5b909842ad9fccab448bac742495da9db5f40433c6c2877694683b061dd9e1c75be69412d9b8dcad804c85d7e5b85a0c11a15b5955263b269b35a698d6fc5f30a3d97ab173a15511188a639d0d97bdc7daa2f576f9f5a7a0d9efb4738c2a760b03a78dc634d352e3b78605db9127d1a7fe745f49b62ae75b525b8e3aa4ef40fcd2cb8a7210ec7163f27f7b8a6c86c06bbe19b1017b8c18ce639290e5d01cd797175c3af9d3c6fe6d850c569a6016790a100ac3a596fc41b1980faee9d3b82ab8f30500b4d743f6cee2dbca4b6558de9bb14cbba6b8fecb39bd6d2b977fa443ed2a4be111af291230cfae62e3c59966b4404582679b4105821ef99a09efeffdcfff4ae79beadeec8db68166148bf738ad581646116617fc793ac22c4cd08bd684114a16dc48173a2795e16deead20e23276e52fe5556cc75041cf27b54cd657c020225869070300be18af8ef86b8b68a62e794b898c3e9b290fbcf458425c2ea96011cc0a06d2182ac2d697299f77185cee0637580441e95f23a73170c7a623d079cb8b3eeba368c90b4e07f12ec2b09f75283c241ab72c182ec8814b9a65ec0fe17864f58ec6335cbceb00ba6a5e18f7a3e0a4c50ed8178053d1c75f1867944eb0d17dd2f775a3eb26f3ed58a4b9a569c0d5ed31092587f80798370a7475e20e8acbd7d517674c65286847807847b726febb8a9d10eff7c353e649f70bc74004a5d65dd5d79c5a49ac2d0237f5be067a49f61848e835b57e87d8c2fa74191da568e9e0f55247d06c29a4bbc1c82e49aaf68745c9626068b0c4f51d37498cea4497e65b009d74336049cfc6aa0b286d702b50e395ece5fd2f0915ebc93197a5c446c6cbf92958e9efb4bc3128fe2ce9e49d644582dc8e48bc92fdeca4f3714e744372291110e0ef69aba97f272911a23581d524d06526da03fea1e6defd7e036478efd9afc57fd8349292558ee3582dc6b2e6ff6eeb36770d4c616e8cd4e0591caf31a6d99851cbdf0669bd6886ea0f82b3001b340dded0f636a52e8237f5a688255b580e1d8a897a778322a38134d190283bdd53613035bff7b94e17ad5fdede8329a56e640f5d7cdfba70ba1d74c1600f798be4d2195df2494b16d5f01067098f4aaaef8cdf04984a5214285352a4def2249099f42d719dc9554c3b761c1b63e6d798f4e27491385f27e8e2d0a0412a9a2a5de64193064259e3d9a68a08e86cbb02fcce74d973b3b07f2a77b06a350dea8cd8220115d214a1e0f901b4c4b10b2eb4309d9a16b5de9e00ec89c5d5b3c55973677e7dd8312138c36ebbfd80e1d267da4e2bd365d4f2b38daa525a661421ddc47965ee5098d7f186fa97eb11f19de87ef0f630f36139e3d38afe03ed4d4712e689bb1b71a0ef7647da750eaaba895e3e4f06e766a7dc443e965d54f8952ba0617f72b54992b83308cebd097d44c3189d215c19949ce2ab0873b865b65782bf27eea4367b9fa15ea7199911a1c382318d5c736a75f474e62693bb9f957a37ef7c8bb41504d70c30815c88ae35612f9ad9f9b801409299f600e5b4732d331a1f6174b9d4ea47f52ea92ee4aa10a4e700e7f02582abdca26f6c1bcf5490833252d34bd5042a480b8c7369ae80ce1f9df7cb823a79e171fbb95da2c13ffe6fa782747da2fdf2c77ad3bb382616a02a4babb473f4f2b1488af0ff6d69e46af11d335b702b11d094ee089f46dbea002a6af8a9bd92cec8304d8422afe8b4d4f69ef22e01dd7489b00437d0888e7f526180b94bf7aa9bfaeb4c98e56ef396b0e03c5e731ea42dc16a968e2b1d83db685d0e1b8a0134e28d8e255a8887a205374407aa07fc1c9280a1d95409854898cec2f6b465f18705f25aa60b1c0f9073213486925cc15a524b7c3b1a14b8dbb1461daf83377aa94eae7f5e8f5324edcd7fd5996b782d5ae836f09a5344288304520bc633c4cfd8c9226717afaf534c697b70b4508cccc24ed09e25fd76420befcb9a027d0db2d8b408c2925da09bbcf135ad01b288657657eb7f4b40f58918dd4b52567f2b6960279f3b26a2cc9e18d657dab46609aac597f8f3a27ecaa5f772dcc7bc202029e5048594455d3316f7361f1e04f7c0dbceb890dcd22e8d3464ad75d0254332cb9be42a584e05145a4e642317bb0420ba7582dd2c141ff7a16c74789348169caee21a02b41e24287d67e9ff9a3ac284ffff957b657fbc452072b406c52c76aafe3d1003ca95acef079935d605e5ed4e111cf8b6e1c0fdd5811e4b3daa82c4d163a8b0fa27c079b0621dc44671ce1102aa3fe2d166b2575e103e6b0232ee269cd446ff75299b92c6fc9e495bd4baee2279065458d3c5bec93874ee2cfdb231ad0037484345745c8131d1a159f3897ef8b1d7dd8b04f323ba2939f2626547dbbc3076b6ea85755c26ba0c36105561b7f3d54e4a6f8459cfd1a138298b3edb9c662f2d6174ab630e8a9a0a97f60f1a8f6c052e1f5c8110b8b6e1a7c545bd05d079fb45a03a9c863fc14e64531d1d62a9b0e5b99eaba53bf94d4a60fe9e6ec37f7815bd26cb681d138d6185c77585c6a386c7b0c2aee0ccbd7af46778145a82d48027beb7c5b8e9a26c2de547ba95b75a787872b6c007f266357d76eb9766cf21d4e8bd17d4037ab65cd917cf2b69f8f5d385917a2b90a5fb87343d7621448d4812478ccd6106b14aef002565af09ece622a966d7914e8da5281f955d1c528910efa97f08af0eded1be59ab9612a3801f03075272c47e6f99056ce327bf0986b0f9a1f0864ce9945648a7f6b9c7fbc0b0091718bdb784d8b974b9ce5e31d6993687cc9e60b18733f9131e1ab3aa3f9f6869386e0dff9a98e9509679c622087c184234b926d1feeec15473e2dd62476f9e45f053211f85dd8bc8ea1bbfb5739c8e03110d48c9d25808875610b8d942d4cd1a4dbdb62a6dd6e7c974d4529f21a5f6cd7bcc4656e43dffc4623a7696294253a04ee05f84a7e766e6c0db5b17dfd8fa16145cad1f0e0d16b083d199f3526aefec5a6b9a33f8137267c95d9052738095a4c59f943e39b4de78ff2e2d005c17124801dd0822e0c3067b51b42c2adb8087e45fc96a9226fb6cacb1457b63024fc7320ca225ea7ffcb452cc94e930a5685172bbb84caa94f8100b133129997d1a896b2984d1ed0f30e2668702f8fca6126d8440068de74317afb613032a22fcc4cbaf9e10f7447735fd21980c37a15c714c68a080b14373e72a1b2237d3c9ab8774da1a12443bd512a8ea9e764532ba232bdebcb74da684e20445c5102c15273b8053516b7cdd239229a9cf7f9bf7b4ef4afc37af22518d7c6171c41cda51a9b111fbeb9b28c777acf4d16c3770239bf9bc4ee5ef2aec1ae7a8a54b23f8787a7989dfdfa308425b074a5121727008c6c1e305a97136f2511b90d3ed90c3262917175d55883e84fae72fc2d07732879320a74a06c9a2b11c832f3450997eb1e226090067068972949d20ea239cdcd2222424bfff1476296526599d7a9bc04339ab4be71425d3dd40808f544899527e26c53cc0f7f6e5e8ae4a1fe28becb202d99c4516fb17a7dc64f83fcf5b602f8cbc1db4751e96cff61348f456dd2e1eeb216b7453bb23553fb31cfc870e59f6dd406c7116da905f2dc02b6b40d1483e31036a2c32e76a6ec28f4e66ce14235202be5db34cf1b21cf4011cb547c48329db971d58736a45aeccea76ccf7fb9a4ed2ddc1f356a5026d17b638f178b449a9c7933a3fbca2070ea0c9a6b092c10ad96c04f88caaed287cda9a539ea071ea5bb2ed83dc20b35fab94d938d515b8402ff4dc1fe483299bef22b2fabb91fd570d5bc9e6c0e62a565e5aa87379f00fbba15e8adc4c1d5d0415977fbb5da4bbcd902f4d02107f1b89587e4cd78e12eb1afe43d3df400176b8541d822f098e727599ae95390d4eadf019d6aba4b571a6b8078d93618094d065b9dec7d1a4f104c6d321dc834fb11744813fe2d7abc0ebb66ec45382ee300bf7cdea27c3181fc837e373f7d9d7aaabac8d5e5eb291e253da44e45360fe7c397541b1ea3ef479d13e465ec779fd416de8f6943a0e4e4d43fc24764ce385f9041b9912b40481ff3fcf53fa5a52ac1d68f94e322a5f239fef098c53eabf08fc63ffbd9392ddfc75a2fd1ff097855bde1659f5907cc40d6e200dd200a2287013dfe5a139113aaaa9228291d9a5fe0bc01e426356dfb7dc27d97d8aa9558635a6c5554279325128b51408242bd814bc2bb06546609eca0c7f273bc656e13017b9f0428ba989ddbb7ba3be41276aeb2ca589b53d4f04b1f1d9f5b4fd3cdf3c73140840b12669cad9160b1569f9b39c61e7ab59d84e6be8bbc88dd1a8f555f1334ed59d7de6563c75166cbc09a86f9f69f255efd51e7ab71760a91ab60a3924aadf9191852ba87e952dcf15ed2e70a887f983d141b6aa19fe5fe9f0cb026c7bef0be82ddf19dd3e551b7b62e755e1c137411c594b4c2fa09b904926aca456db7976adc8170e6d85a004e81d4a8fce16e1f056c2c23cd1f9ac0", 0x1000}, {&(0x7f0000003a00)="fce4e5ad25d90335e06ad221bc1e149d9792dfaabea597ea29bafde32a63361657faba954b0d28b5a199fd120806173351dd39532d7bdd3f61c2fe2e3f9cffd64292454cf99443d4fe0c43d7a7e597", 0x4f}], 0x9, &(0x7f0000003c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r10, r9]}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xa8, 0x20008040}}], 0x1, 0x4000000) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r13, r13) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) (async) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r14, r14) syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r15 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r17 = dup2(r16, r16) ioctl$EVIOCSKEYCODE_V2(r17, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r17, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x140f, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xcc00) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r17, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x140f, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xcc00) pidfd_open(r15, 0x0) sendmmsg$unix(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="818bb60c37b9c4012bcb3c645d9d3f522bdbd8fb14a78fcac1f94e0665ca8a1092e7b8d61eda8548e5084cb4ad1a7505a04f020b34581b23", 0x38}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}, @rights={{0x24, 0x1, 0x1, [r9, r12, r2, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee01}}}], 0x80, 0x1}}], 0x1, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="818bb60c37b9c4012bcb3c645d9d3f522bdbd8fb14a78fcac1f94e0665ca8a1092e7b8d61eda8548e5084cb4ad1a7505a04f020b34581b23", 0x38}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}, @rights={{0x24, 0x1, 0x1, [r9, r12, r2, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee01}}}], 0x80, 0x1}}], 0x1, 0x0) io_setup(0x40, &(0x7f0000000280)) (async) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r18, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async) io_pgetevents(r18, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r18) 14:42:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000440)={0x8400, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x26}, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/118, &(0x7f0000000400)=[r0], 0x1}, 0x58) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r8, r8) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003c40), 0x10400, 0x0) r11 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r11, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="af53f4d527d0563fbf13e75e99ba25c8956c1b67a17c1f483568d589e5d14992640d504e2151c82468de007795b3870b291a5c254519e61fcc658912c9393807a2172adc0fd8601f0252bab645687737b4d0e6965e783031650990bffbfdec73fbcb928b3767346bb0413df1b3dd97972268c431dea6157712d076ad3b3af0763b081cbda2409787ea71d90d9df228952adc13ae9334aaf5", 0x98}, {&(0x7f0000001800)="544a631ad6c8c8cc3c35846ed7007c437ba61e14b085a6321dccf12da023fcc2155e50f3b13ecb9122f1e0a62c1ffc741d", 0x31}, {&(0x7f0000001840)="999c583d675c82f028f4af306c5f7e90998c3a7d6de5e604cd23c4df3ef8ef8a07e5eb095fcd97402767cf078413421bc7f17becbb18e9219727314e382d37423bab3c68993ac5c8f6700e159db1cd22ca3903583102a26b79046d175c10677c6540bddfc1dc10", 0x67}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="ea3ec0e0fd7aab889c7e4c36e43581cd8b190015155e8665a498d754a0a302cce732cbc0a73e1b500a6dc228c3598d90286c16d078e3c0fe6877e7038e18715496c4027f90ba518de539d206eb753cdcd9b7f6e2628cb7093cda092caa52069a279d4c5e4be15f32cdf151393f13f6f0dc942b73074d3555b36e12142a5c0de55b2a9c6ea77431a29fd9e25e3d5b91be6be146d28c8349afc447be079383828d9066714c62a924fb6617dd1a9977e78faf27d801f430c27dc1827b7db6bcea63edbbabf22d8d28cbc9f8434650a6c1792b9b87", 0xd3}, {&(0x7f00000029c0)="a9dac938ad31b39a02", 0x9}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="fce4e5ad25d90335e06ad221bc1e149d9792dfaabea597ea29bafde32a63361657faba954b0d28b5a199fd120806173351dd39532d7bdd3f61c2fe2e3f9cffd64292454cf99443d4fe0c43d7a7e597", 0x4f}], 0x9, &(0x7f0000003c80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r10, r9]}}, @cred={{0x1c, 0x1, 0x2, {r11, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xa8, 0x20008040}}], 0x1, 0x4000000) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r13, r13) r14 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r14, r14) (async) r15 = syz_clone(0x81a00a00, 0x0, 0x0, 0x0, 0x0, 0x0) r16 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r17 = dup2(r16, r16) ioctl$EVIOCSKEYCODE_V2(r17, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r17, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x140f, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xcc00) (async) pidfd_open(r15, 0x0) sendmmsg$unix(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="818bb60c37b9c4012bcb3c645d9d3f522bdbd8fb14a78fcac1f94e0665ca8a1092e7b8d61eda8548e5084cb4ad1a7505a04f020b34581b23", 0x38}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}, @rights={{0x24, 0x1, 0x1, [r9, r12, r2, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee01}}}], 0x80, 0x1}}], 0x1, 0x0) (async) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r18, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async, rerun: 32) io_destroy(r18) (rerun: 32) 14:42:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r2) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r3, r3) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r10, r10]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r12, r12]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r13, r13]) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02f8ff08d82b63960ab63c1031e2db8878982200d97059864ded67015a49680c3022e938b9de9e54015400fb67bb597633da7362214eb3723cdb070f3956d44a4eb1695317f902e1b89210ef5952731e51c92f7faee120ac3473fc9de42795309263773ed060c10d772732aa0a7266eb409865c44a184ee7a46ae7119e6e63d47655b7", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000400", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000300000000002000040000000000"], 0x9c, 0x3) 14:42:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:43 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:43 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)) (async) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r2) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r3, r3) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) (async) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r10, r10]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) (async) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r12, r12]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r13, r13]) (async) getgroups(0x2, &(0x7f0000003780)=[r13, r13]) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02f8ff08d82b63960ab63c1031e2db8878982200d97059864ded67015a49680c3022e938b9de9e54015400fb67bb597633da7362214eb3723cdb070f3956d44a4eb1695317f902e1b89210ef5952731e51c92f7faee120ac3473fc9de42795309263773ed060c10d772732aa0a7266eb409865c44a184ee7a46ae7119e6e63d47655b7", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000400", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000300000000002000040000000000"], 0x9c, 0x3) 14:42:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:43 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) io_setup(0x40, &(0x7f0000000280)=0x0) (rerun: 64) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) (async) io_destroy(r2) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) dup2(r3, r3) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) (rerun: 32) getgroups(0x2, &(0x7f0000003780)=[r10, r10]) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r11, r11]) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) getgroups(0x2, &(0x7f0000003780)=[r12, r12]) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40000000) (rerun: 32) getgroups(0x2, &(0x7f0000003780)=[r13, r13]) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02f8ff08d82b63960ab63c1031e2db8878982200d97059864ded67015a49680c3022e938b9de9e54015400fb67bb597633da7362214eb3723cdb070f3956d44a4eb1695317f902e1b89210ef5952731e51c92f7faee120ac3473fc9de42795309263773ed060c10d772732aa0a7266eb409865c44a184ee7a46ae7119e6e63d47655b7", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000400", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000300000000002000040000000000"], 0x9c, 0x3) 14:42:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:44 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:45 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:45 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000f8939789ea6d96f5e4710000000000002e2f66696c653000ec2ea281ebe38cf984eef3e5f0d7e819e137fa4eb8916888ad66a61b"]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r2) 14:42:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_setup(0x40, &(0x7f0000000280)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r2) 14:42:47 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:47 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:48 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:48 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:48 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:49 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:49 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:51 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:52 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:52 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:53 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:53 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:53 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:54 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:54 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:55 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r1, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:56 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:56 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:58 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:58 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:58 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:59 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:42:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:42:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:42:59 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:00 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:00 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:00 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:00 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:00 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:00 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:01 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:01 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:02 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:02 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:03 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:04 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:05 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:05 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:05 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:05 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:06 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:07 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:08 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:08 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:09 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:10 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:11 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:11 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:11 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:11 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:12 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:12 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:14 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:15 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:15 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:16 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:19 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000003c0)=0x400000004) [ 426.353230][ T2711] ================================================================== [ 426.361419][ T2711] BUG: KCSAN: data-race in __blk_mq_requeue_request / bt_tags_for_each [ 426.369698][ T2711] [ 426.372017][ T2711] write to 0xffff8881031ed360 of 4 bytes by task 41 on cpu 1: [ 426.379469][ T2711] __blk_mq_requeue_request+0x9f/0x2b0 [ 426.384940][ T2711] blk_mq_dispatch_rq_list+0x9a2/0x11f0 [ 426.390486][ T2711] __blk_mq_sched_dispatch_requests+0x1ab/0x260 [ 426.396730][ T2711] blk_mq_sched_dispatch_requests+0x93/0x100 [ 426.402730][ T2711] __blk_mq_run_hw_queue+0x8e/0x110 [ 426.407926][ T2711] __blk_mq_delay_run_hw_queue+0xb3/0x3a0 [ 426.413660][ T2711] blk_mq_run_hw_queue+0x19f/0x330 [ 426.418777][ T2711] blk_mq_run_hw_queues+0x15b/0x1e0 [ 426.423982][ T2711] scsi_run_queue+0x55a/0x580 [ 426.428661][ T2711] scsi_requeue_run_queue+0x25/0x30 [ 426.433866][ T2711] process_one_work+0x3e6/0x750 [ 426.438722][ T2711] worker_thread+0x5f2/0xa10 [ 426.443318][ T2711] kthread+0x1a6/0x1e0 [ 426.447385][ T2711] ret_from_fork+0x1f/0x30 [ 426.451800][ T2711] [ 426.454117][ T2711] read to 0xffff8881031ed360 of 4 bytes by task 2711 on cpu 0: [ 426.461651][ T2711] bt_tags_for_each+0x2e2/0x500 [ 426.466502][ T2711] blk_mq_tagset_busy_iter+0x114/0x150 [ 426.471977][ T2711] scsi_host_busy+0x4f/0x80 [ 426.476487][ T2711] scsi_queue_rq+0x30a/0x1990 [ 426.481198][ T2711] blk_mq_dispatch_rq_list+0x7b1/0x11f0 [ 426.486738][ T2711] blk_mq_do_dispatch_sched+0x4de/0x820 [ 426.492283][ T2711] __blk_mq_sched_dispatch_requests+0x1c1/0x260 [ 426.498539][ T2711] blk_mq_sched_dispatch_requests+0x93/0x100 [ 426.504523][ T2711] __blk_mq_run_hw_queue+0x8e/0x110 [ 426.509722][ T2711] __blk_mq_delay_run_hw_queue+0xb3/0x3a0 [ 426.515437][ T2711] blk_mq_run_hw_queue+0x19f/0x330 [ 426.520547][ T2711] blk_mq_sched_insert_requests+0x1da/0x2c0 [ 426.526445][ T2711] blk_mq_flush_plug_list+0x519/0x660 [ 426.531902][ T2711] __blk_flush_plug+0x223/0x280 [ 426.536750][ T2711] blk_finish_plug+0x47/0x60 [ 426.541338][ T2711] jbd2_journal_commit_transaction+0x1c28/0x3410 [ 426.547673][ T2711] kjournald2+0x242/0x420 [ 426.552002][ T2711] kthread+0x1a6/0x1e0 [ 426.556068][ T2711] ret_from_fork+0x1f/0x30 [ 426.560484][ T2711] [ 426.562803][ T2711] value changed: 0x0000117f -> 0xffffffff [ 426.568521][ T2711] [ 426.570872][ T2711] Reported by Kernel Concurrency Sanitizer on: [ 426.577011][ T2711] CPU: 0 PID: 2711 Comm: jbd2/sda1-8 Not tainted 6.3.0-syzkaller #0 [ 426.584985][ T2711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 426.595034][ T2711] ================================================================== 14:43:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xf, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:20 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xf, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:22 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xd, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:22 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 14:43:23 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 14:43:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xd, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 14:43:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xb, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, 0xffffffffffffffff, 0x10000000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 14:43:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:25 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xb, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xb, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:26 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:26 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:27 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x11, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x84a, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xd, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:28 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000900)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r1, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x110, 0x0, 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x186, 0x0, &(0x7f0000148000/0x1000)=nil, &(0x7f00005f1000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 14:43:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCSKEYCODE_V2(r4, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff, r4}, 0x80) socket$unix(0x1, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140), 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80084504, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "cacc875f0cb687b6b6774062a87320f0c38e666d9fac30f0fb9d1084f7715b0f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xd, &(0x7f00000004c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x9, 0x8, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000180)='syzkaller\x00', 0x356, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x1, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x2, 0xda000000}, 0x10, 0xffffffffffffffff}, 0x80) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ebb440701"], 0x20000600}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000003c0)=0x400000004) 14:43:28 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)